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SUMMARY 


This report discusses techniques for validation of software modules 
which simulate spacecraft onboard systems. The results presented in this 
report represent a portion of Task 2 -- the performance verification task -- 
of the Simulation Validation Techniques Study (SVTS). Task 2 is concerned 
with simulation validity ; i.e., fidelity of representation of the real 
world. The outputs of this study task will support validation of the next 
generation of training and procedures -development simulators at JSC. 
Specifically, these results will enable NASA/contractor personnel to: 

0 obtain the basic reference data which establishes standards 
of simulation performance 

0 develop the support software needed for check case generation 
and data formatting 

0 develop the support software needed for realtime performance 
data acquisition and subsequent processing. 




Section 3 of this report defines the objectives of this study task. 
Section 3 also provides an overview of the simulation software hierarchy 
for a Shuttle mission simulator. The major categories of simulation software 
are environment, crew station, vehicle configuration, vehicle dynamics, 
and vehicle subsystems. Vehicle subsystems simulation modules are covered 
in this report; all other categories were covered in a previous report 
(Ref. • 1 ). 

' .4 

Section 4 presents the technical results of Task 2. Section 4.1 presents 
a set of' guidel ines for the identification of subsystem/module performance ■ 
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parameters and "critical" performance parameters. Section 4.2 identifies 
various sources of reference data to serve as standards of performance for 
simulation validation. 

Sections 4. 3-4.6 very briefly discuss the environment, crew station, 
vehicle configuration, and vehicle dynamics simulation software, from the 
point of view of their interfaces with subsystem simulation software modules. 

Section 4.7 provides a detailed presentation of our study results in the 
area of vehicle subsystems simulation modules. The vehicle subsystem hierarchy 
is expanded down to the lowest level modules of interest for performance 
verification. For each Vehicle Subsystem, we present a description of the 
subsystem, and a definition of the simulation software module for that subsystem 
(including a module interface diagram and a list of performance parameters). 

Sources of reference data for. module validation are discussed, and a flowchart 
of a suitable reference module is provided. Finally, validation techniques 
appropriate to that module are identified, static and/or dynamic check case 
requirements are defined, and an estimate is made of the data base impact 
for module validation. 

Section 5 presents our conclusions and recommendations. Section 6 is 
a list of references. 
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SECTION 2 
INTRODUCTION 

This report presents Subsystem simulation performance verification 
techniques defined during the Simulation Verification Techniques Study (SVTS) 
being conducted for NASA's Johnson Space Center under Contract NAS 9-13657. 

This study is being performed by McDonnell Douglas Astronautics Company - 
East at its Houston Operations facility. Keith L. Jordan, Simulation 
Development Branch, FSD, is' Technical Monitor of the contract for the NASA. 

The Simulation Verification Techniques Study is one of a number of 
studies being conducted by NASA-JSC in support of the development of training 
and procddiires-development simulators for the Space Shuttle Program. The 
other studies were: Shuttle Vehicle Simulation Requirements, NAS 9-12836; 

Space Shuttle Visual Simulation System Design Study, NAS 9-12651 , perfonned 
by McDonnell Douglas Electronics Company; Development of Simulation Computer 
Complex, NAS 9-12882; Crew Procedures Development Techniques, NAS 9-13660; 
and Advanced Crew Procedures Development Techniques, NAS 9-14354. The 
latter three studies were performed by McDonnell Douglas Astronautics Company - 
East at Houston Operations.- 

The present study is concerned with the development of self-test 
techniques for simulation hardware, and the validation of simulation per- 
formance. The report for the Hardware Verification Task (Ref. 2 ) has 
already been published. A report describing all results of SVTS Task 2 
will be published at the end of January 1975. 
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SECTION 3 

STUDY OBJECTIVES AND SCOPE 

This report covers a portion of the work done under WBS 2.0 of the 
Simulation Verification Techniques Study. 

3.1 PURPOSE 

The purpose of WBS 2.0 is to develop methods for verifying simulation 
fidelity with respect to the real world; i.e.,to ensure that the simulator 
responses presented to the crew are indiscernible from those which will be 
experienced during actual flight. During simulator development, performance 
verification (validation) ■ is performed on individual software modules, 
at various stages of integration, and finally for the all-up simulator 
system. In addition, revalidatlon will be necessary from time to time 
during the simulator's operational lifetime, as modifications are made 
to hardware and/or software. 

The outputs of this study task will support validation of the next 
generation of training and procedures-development simulators at JSC. Specifi- 
cally, these results will enable NASA/contractor personnel to: 

0 obtain the basic reference data which establishes standards of 
simulation performance 

0 develop and use the support software needed for check case gener- 
ation and data formatting 

0 develop and use the support software needed for realtime perfor- 
mance data acquisition and subsequent processing. 
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WBS 2.0 is divided into three subtasks: 

0 WBS 2.1, Definition of Performance Parameters: Analyze each 

Shuttle subsystem and simulation module; define a set of parameters 
which completely describe each subsystem/module. 

0 WBS .2.2, Establishing Standards of Performance: Define methods 

to provide reference data to serve as standards of performance 
for module validation (e.g., batch programs, test data). Define 
^ data formats, determine data base impact. 

0 WBS 2.3, Methods for Validating Performance: Define methods for, 

realtime performance data acquisition and comparison with 
reference data; define comparison criteria. 

3.2 SCOPE OF THIS REPORT 

Each of these subtask efforts must be applied in the context of each 
subsystem/module, as well as in the context of integrated simulator system 
operation. Because of the considerable body of specialized information 
required, it is convenient to work on the performance parameter identification, • 
reference data sources and validation methods peculiar to a module all at once, 
rather than deal i tig with different aspects of a particular module at three 
widely-separated times. For that reason, this report is organized on the 
basis of the simulation software module hierarchy, and includes module- 
oriented efforts which fall under all three WBS subtasks.. 

Figure 3-1 shows an overview of the simulation software module 
hierarchy developed for use in WBS 2.0. The software categories covered 
in our previous (Ref. 1 ) report — Environment, Crew Station, Vehicle 
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Configuration, and Vehicle Dynamics — are enclosed in the dotted lines. This 
report covers vehicle subsystems simulation modules. 

For each module covered, this report provides a description of the 
module's functions and operational modes, its stored data and inputs, and 
its performance parameters (including "critical" performance parameters as 
defined below). Sources of reference (standards) data are identified, and 
performance-verification techniques and support software are briefly discussed. 
Validation data base impact for each module is defined. 
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The focus of this report is vehicle subsystems simulation module valida- 
tion, discussed in considerable detail in Section 4.7. Sections 4. 1-4. 6 
provide brief introductory material to define the context in which the 
subsystems simulation analyses were performed. 

4.1 PERFORMANCE PARAMETER GUIDELINES 

In performing an analysis of each onboard subsystem and simulation 
software module, we must extract from its basic defining information a list 
of performance parameters, which completely describe the performance of the 
subsystem/ module. By this we mean that any error or inadequacy in the 
simulation must show up in one. or more of the designated performance parameters. 
We envision such a complete performance parameter list to be useful primarily 

' f 

in the exhaustive initial validation of the simulator. 

In addition, we have further examined the complete parameter list for each 
module, designating a subset thereof as "critical" performance parameters. 

The primary utility of the critical performance parameter list would be in 
revalidating simulation modules after modifications or updates; we assume 
that if a module's critical parameters provide acceptable fidelity, it will 
not be necessary to check the rest of the performance parameters. Criteria 
for identification of performance parameters and critical performance para- 
meters are given below. 
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4.1.1 Performance Parameters 

The performance parameters for any onboard subsystem simulation module 
or for the total vehicle system simulation must have the following properties: 

a. They must be real-world variables (either continuous or discrete). 
Thus, synthetic variables which are defined for analysis and 
programming purposes — e.g., auxiliary angles, counters, 
initialization flags -- cannot be performance parameters. 

b. They must be time-variable quantities, not constants; e.g., 
aerodynamic-coefficient tables are not performance parameters. 

c. All system "state variables" are performance parameters. (State 
variables may be de”fined as the dependent variables in the 
system differential equations, when the equations have been 
reduced to first order). 

d. Some outputs of a module may not be performance parameters. 
Outputs unrelated to the module's designated functions (e.g., 
power consumed and heat dissipated by an IMU) are "incidental 
outputs", not performance parameters. 

e. Some perfonnance parameters of a module may not be outputs. 
Internal variables (either continuous or discrete) not normally 
output from a module will still be performance parameters , i f 
they are real-v;orld variables, and are essential to the repre- 
sentation of the performance parameters which are outputs. 

f. Every variable available to a flight computer or telemetred for 
ground- controller use should be a performance parameter of some 
module. 
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g. Inputs to a module are never performance parameters for that 
module. (This rule prevents double-counting; thus no variable 
ever be a performance parameter for more than one module.) 

4.1.2 Critical Performance Parameters 

Guidelines for selection of a subset of critical performance parameters 
from the set of performance parameters of a module are somewhat less clear- 
cut than those for initial selection of performance parameters. A performance 
parameter may be denoted as a critical performance parameter for one or more 
of the following reasons: 

a. It is a particularly significant indicator of simulation 
validity for its associated module. 

b. Its accuracy has a long-term or cumulative impact upon the 
simulation validity; e.g., orbital drag forces, consumables 
expenditure rates. 

c. It is readily available to the crew (by permanent or callable 
display), and plays a key role in crew operational procedures. 

d. It is communicated to the flight computer(s) and plays a key 
role in computer control of vehicle systems. 
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4.2 ALTERNATE REFERENCE-DATA SOURCES 

The Standards of Performance sought in this task are sources of reference 
data representing the real world, against which the simulation fidelity is 
to be evaluated. Four basic classes of reference-data source are considered 
in this study: 

0 Closed-form solutions: exact or approximate formulas giving 

answers to be compared to the output of simulation routines. 

0 Independent math models: parallel software development for 

the explicit purpose of providing reference data for module 
validation. 

0 Existing analysis/simulation programs: established, previously- 

validated programs which can be exercised with check-case data 
to provide outputs directly comparable to simulation module 
outputs. 

0 Test data: vehicle and/or subsystem data from an actual 

laboratory or flight environment. 

* 

Table 4.2-1 briefly lists advantages and disadvantages of each of the four 
basic classes of reference-data source. These considerations will be discussed 
in greater detail in a later report. 
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4.'3 ENVIRONMENT MODULES 

Environmental conditions external to the Shuttle vehicle interface with 
and influence the performance of the vehicle and its subsystems. The total 
environment is considered in two basic divisions ~ natural environment and 
artificial environment. 

4.3.1 Natural Environment 

The natural environmental factors influencing the Shuttle vehicle include 
the earth's atmosphere, winds, gravitational potential, sun/moon/star positions, 
and terrain elevation. The atmosphere and wind produce aerodynamic affects, 
generating forces and moments on the vehicle. Gravitational potential is 
another important source of forces and moments. The sun, moon and star positions 
provide guidance and navigation inputs. Finally, the terrain near the landing 
site reflects radar altimeter signals, used for altitude measurement during 
Orbiter approach and landing. Figure 4.3-1 shows the interfaces of the natural 
environment module with other simulatign modules. 

4.3.2 Artificial Environment 

The artificial environment consists of external systems and equipments 
which provide the Orbiter with certain services — data, power, fuel, cooling — 
or .request such services from the Orbiter. The three artificial environment 
modules discussed in this section are ground navigation/communications, payloads 
and rendezvous targets, and prelaunch/launch interface. 

4. 3.2.1 Ground Navigation/Communications 

Ground-based navigation and communications equipment provides , data and 
command inputs to the Orbiter through its communication and tracking subsystem. 
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The ground systems planned for use during Shuttle operations are: 

0 Dual -antenna S-band telemetry 

0 UHF voice 

0 STDN/TDRS (NASA systems) 

0 SGLS (DoD system) 

0 Aeroflight navaids: TACAN, MSBLS 

Figure 4.3-2 shown the interfaces between the ground nav/comm simulation 
module and other simulation modules. 

The ground nav/comm simulation module will simulate the transmitted 
signal strengths and received signal strengths of ground-to-orbiter and 
Orbi ter- to-ground communication links, by use of antenna pointing and antenna 
gain-pattern computations. 

4. 3. 2. 2 Payloads and Rendezvous Targets 

A wide variety of payloads and rendezvous targets will be deployed and 
retrieved by the Shuttle during its operational lifetime; for example: 

0 Cryo tug 

0 Agena high-energy payload 

0 Interim tug 

'• 0 Large Space Telescope 

0 ESRQ space lab 

0 Earth observation satellites 

In addition, Orbi ter- to-orbi ter rendezvous and docking maneuvers may be under- 
taken; e.g., for rescue purposes. 


4,3-3 

MCOOIS)niEL.i- DOUGLAS ASTFtOISlAUTICS COMPAPJV - EAST 


AVIONICS NAV/COMM KODUIE 


FK Xl^ilTTER 
TKM '• 

DFI . " 


Antenna 


Selected 1 
Signal 
Strengths 


UHF 

TRAl-ISCIEVER 


SOLS : 
.WJDR 


TACAN 

RECEIVER 

Sig Str 


}-!SBLS 

RECEIVER 


RADAR 

ALTIMTER 


Frequency 


Signal siSal oh I/^cation preauencv -i' On 

— fsi ~ — -i — ■■■■ ■ ■■- Heading - — J 


Signal Strenght locflion^^ k^cation?;. 


DUAL S-EADD 

TEIZMETRY 

RECEPTION 


UHF VOICE 
X»;iJinCATlON 


TACAN 


MSBLS 


TCRRAIK 


Enable 
'FH, 
TLM, 
DFI ' 


GROUND NAV/COKM 


Data 

’ Enable 

UHF 


Enable- 

SOLS 


STDN/TDRS 


STDH 

STATIONS 


Data 

Enable 

STDN 


Si gnal Signal Strength 

Strength 


EQUATIONS : 
OF MOTION 
MDDULE ! 


OTHER FDDUIES - GROUND OPERATIONS 


STDN'/TDilS 

XPNDER 


figure’ 4.3-2: ground NAV/COMM MODULE FUNCTIONAL ELEMENTS. 
AND MODULE INTERFACES 


MDC El 201 
30 Decemt 



















MDC E1201 
30 December 1974 


The payload/target (P/T) simulation module must provide for maneuvers 
(if any) made by the P/T when free-flying (post-deployment or pre-retrieval), 
for onboard consumables usage affecting the P/T mass properties, and for command 
and data transfer between the Orbiter and the P/T. Figure 4.3-3 identifies 
the major functional elements of the P/T simulaticn module, and shows its 
interfaces with other modules. 


4.3. 2.3 Prelaunch/Launch Interface 

In the final phase of the prelaunch countdown, ground-based systems are 
interfaced with the Shuttle vehicle for the following functions: 

0 Communications and instrumentation (RF and hardline) 

0 Electrical power 
0 Environmental control 
0 Hydraulic pov/er 

0 Purge, vent and pressurization 


Mechanical hold-down until successful engine startup is verified 

K 


These functions are indicated on the module interface diagram. Fig. 4.3-4. 
lie do not anticipate a very detailed implementation of prelaunch/launch functions 
on any upcoming JSC simulator. 


f 
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4.4 CREW STATION MODULES 

Visual and motion simulation are of crucial importance in the flight 
crew's subjective perception of the simulation fidelity. Highly specialized 
software and hardware are necessary to accomplish visual and motion simulation, 

i' 

particularly over the widely varying dynamical and operational regimes of 
Shuttle missions. T 

Figure shows the interfaces involved in visual simulation. Different 

types of hardware will be required to provide the various visual -scene elements. 
Each hardware unit will require its own software driver module, with control 
provided by a visual-system control module, using inputs from the simulation 
software. Several distinct fields must be generated, to provide forward 
and aft out-the-window views as well as TV displays for the payload manipulator 
station. 

Motion-base drive software is designed to create the most realistic possible 
perception of vehicle motions and accelerations within the constraints imposed 
by the motion-base hardware, without introducing spurious cues due to abruptly 
reaching actuator travel limits. The functions of the motion-base software, 
as indicated in the interface diagram of Figure include transformation 

of vehicle motions into actuator displacements, compensation for hardware response, 
and travel -limiting functions such as look-ahead, washout, and bleed-back. 
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4;5 VEHICLE CONFIGURATION MODULES 

The Shuttle vehicle configuration, and hence its response to external 
influences and vehicle system operation, changes during the course of a mission. 

The modules falling in the vehicle configuration category are aerodynamics, 
aerothermodynamics , and mass properties. 

4.5.1 Aerodynamics 

Significant aerodynamic forces and moments occur act on the Shuttle during 
the ascent, entry, aeroflight, and approach & landing mission phases. The 
forces vary with atmospheric conditions. Shuttle velocity, and Shuttle vehicle 
configuration; the moments also vary with vehicle c. g. position. 

The aerodynamics simulation module must access tabular data appropriate 
to the current vehicle configuration and dynamical regime, then use the tabular 
data to compute forces and moments in terms of an appropriate axis set. 

Major configuration changes occur as the SRB's and the ET are separated from 
the vehicle; minor configuration changes occur with landing gear and drag 
chute deployment. Aerosurface positions, ground effects and ET/SRB proximity 
also influence the vehicle aerodynamics. These interfaces are shown in 
Figure /',5-l. 

4.5.2 Aerothermodynamics 

Aerodynamic heating during entry is a major constraint on the vehicfe 
guidance. For maximum downrange travel, the Orbiter is operated near its 
maximum heat loading; therefore, bondline termperatures are closely monitored 
by the flight crew. Heat transfer through the TPS, the vehicle structure and 
the windows affects the temperatures of various internal compartments. This 
directly affects the heat dissipation required of the ECLSS, and indirectly 
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affects the performance of equipment, such as avionics, located in these com- 
partments . 

Aero thermodynamics simulation module interfaces are shown in Fig. 4.F-2* 
4.5.3 Mass Properties 

Shuttle vehicle mass properties — mass, moments and products of inertia, 
and c. g. position — are involved in aerodynamics and vehicle dynamics 
computations. The mass properties simulation module performs the bookkeeping 

and transformations necessary to update these parameters as propellants are 
consumed, SRB's and ET are separated, and payloads are stowed and unstowed. 
Similar, although simpler, computations are performed for certain payloads 
and rendezvous targets. 

Mass properties simulation module interfaces are shown in Fig. 4.5-3. 
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4,6 VEHICLE DYNAMICS MODULES 

Vehicle dynamics simulation is the core of any spacecraft simulator. 

The dynamics simulation modules interface with or otherwise influence the 
results of most of the rest of the simulation; these interfaces and influences 
are indicated by Fig. 4.6-1 . We are concerned with three categories of 
dynamical phenomena — rigid-body equations of motion (EOM), mechanical - 
system dynamics, and bending and slosh dynamics -- and their corresponding 
simulation softv/are modules. 

Rigid-body EOM include translational (point-mass) dynamics of the Shuttle 
vehicle, rotational dynamics, and multiple-body dynamics. Translational 
dynamical computations are performed during all Shuttle mission phases; 
however, different computational methods may be used in the different 
dynamical regimes .‘ Rotational dynamics are computed throughout the mission, 
using essentially the same computational method (direction cosines or quaternions), 

possibly varying the computational rate. Multiple-body dynamics are necessary 

b; 

only during discrete mission phases; e. g., separation of the Orbiter from a 
carrier aircraft, separation of SRB's and ET from the Orbiter, and post- 
deployment/pre-retrieval relative motions of a payload/ target. 

The internal dynamics of such mechanical subsystems as the landing gear, 
docking mechanism and PDRS are driven by the external dynamics of the Orbiter 
motion relative to the runway or an external object such as a payload or 
another Orbiter. In turn, these mechanical' systems impose reaction forces 
and moments upon the Orbiter and the external object. These forces and moments 
depend upon the relattve states and rates, masses and inerttas of the objects 

i 
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involved, the design parameters of the springs, dampers and actuators in the 
mechanical systems, and the location of the points of application of the 
mechanical -system forces. 

Body bending and fuel slosh phenomena represent additional dynamical 
degrees of freedom of the vehicle. Rigid-body and non-rigid-body dynamics 
drive each other by a process of momentum interchange. In addition to their 
dynamical effects, body bending dynamics also contribute to the outputs of 
onboard inertial sensors — gyros and accelerometers,^. The magnitude of these 
effects varies with sensor longitudinal position, being minimal at "nodes" 
and maximal at "anti nodes" of the various normal modes of body bending. 
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4.7 VEHICLE SUBSYSTEMS MODULES 

Vehicle subsystems simulation fidelity is particularly iipportant, 
because it is these simulation modules which interface most directly with 
the flight crew and the flight computers. Subsystem simulations also tend 
to be rather complex, with a great number of parameters (both discrete and 
continuous) which must be accurately represented for configuration monitoring, 
malfunction simulation, and propagation of malfunction effects. 

This section deals with all onboard subsystems in the following categories: 
Mechanical, Purge/Vent & Drain, Propulsion & Fuel, Power Generation, Avionics, 
and Environmental Control/Life Support. 
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4;7.1 Mechanical Subsystems 

This section describes those subsystems involved in the transfer and appli- 
cation of mechanical pov/er. This includes Landing/Deceleration, Docking Mechanisms, 
Separation Mechanisms, Actuation Mechanisms, the Payload Deployment and Retrieval 
System, Hydraulics, and Pyrotechnics. Pyrotechnics, however, are not treated as 
a separate category; rather, pyrotechnic components are treated under whatever 
system they form a part of. 

A detailed discussion of the Landing/Deceleration Subsystem is presented. 

The remaining mechanical subsystems are described with less detail, because they 
have many components - springs, dampers, actuators , etc, - which are similar to 
components found in the Landing/Deceleration Subsystem. 

4. 7. 1.1 Landing/Deceleration Subsystem (LDS) 

The LDS functionally provides for extension and retraction of the nose (NL6) 
and main (MLG) landing gear, shock attenuation of landing impact, deceleration and 
directional control during landing rollout, and a stable rolling platform for all 
ground maneuvering and landing operations (Ref. 3 ). 

LDS Description 

The principle components of the LDS consist of (Ref. 4 ): 

• main and nose gears, fairing doors, and actuating and locking mechanisms 
6 nose wheel steering 

c wheels, tires and brakes 

• brake control and anti -skid system 
c dr:ig chute and deployment mechanism 

Landing gear layout is a conventional tricycle configuration with twin wheels on 
both the hose and main gear. Gear extension is initiated by crew selection of the 
landing gear "down" switch which energizes the uplock release hydraulic actuators. 

The main gear is designed with two additional backup uplock release actuators, 
whereas the nose gear sequences a pyrotechnic uplock release’ backup (Ref. 5 ). 

In ferry-flight and horizontal flight test configuration, inflight retraction 
of the gear is possible; however, for orbital missions the retraction hydraulic 
actuators are less powerful and not designed for inflight operation. They will 
function on the ground to facilitate ground turn-around operations. Figures 4.7-1 
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and 4.7“3 (Ref. C) illustrate the forward and up retraction of the main and nose 
gear into fully enclosed wheel wells. This arrangement enables freefall extension 
and downlock via airloads in flight. 

Nose wheel steering is crew available upon touchdown. Steering "on" selection 
will normally occur when vehicle' velocity is below a "rudder aero-effectivene$s" 
limit. As depicted in Figure 4,7-3 , (Ref. 5 ), steering control is transmitted 
electrically from the rudder pedals to the hydraulic steering actuator. The 
steering actuator also functions as a shimmy damper in steering "on" and "off" modes. 

Primary deceleration of the Orbiter vehicle during landing rollout is accomplished 
through the use of the main gear brakes. For maximum efficiency, braking and skid 
control functions are integrated into a "brake by wire" system as described in 
Figure 4.7-4, (Ref. 5 ). Wheel spin-up activates the fully modulated braking/ 
skid control system to prevent premature brake application. Individual wheel 
lockup is also prevented. This system ensures maximum tire adhesion during 
deceleration thereby maintaining the optimum braking force on all runway surfaces. 
Three hydraulic systems are utilized for the braking/skid control functions. Two 
systems function as backups as any one system is sufficient for braking/skid 
control operation. 

Deceleration is also assisted by drag chute deployment.' The drag chute system 
consists of the main and pilot canopies and risers, deployment mortar, actuation 
mechanisms, and crew controls. Figure ^.7-5, (Ref. ■ 5) describes the crew 
activated deployment sequence. 

Landing shock attenuation is provided by the landing gear pneudraulic (oil 
and air/GN 2 ) shock struts and tires. The tires assist the shock struts in 
absorbing landing energy and decelerating the landing gear unsprung mass to zero 
vertical velocity. The shock struts complete Orbiter vehicle deceleration at the 
required rate. 

Hydraulic actuators used in the LDS are supplied power from the Orbiter 
Hydraulic Power System (HPS) described in Section 4. 7. 1.6. The individual actuators 
will be discussed in Section 4. 7. 1.4. 
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IDS Simulation Module Description and Performance Parameters 

LDS simulation will incorporate several methods to simulate each subsystem 
component function to an acceptable level for the training simulator. 

The LDS simulation module will use Orbiter geometry, altitude, attitude, 
vehicle mass, center of mass, groundspeed, and vertical velocity, along with 
terrain inputs and operator commands, to determine: 

• actuator commands 

• drag chute and landing gear aerodynamic effects 

e crew display signals 

• landing (touchdown) forces and moments 

c .braking and steering forces and moments 

• electrical and hydraulic power requirements 

All command/response relationships will be simulated using sequential time 
delay functions based upon actuator response characteristics and electrical 
power available checks to provide the desired "talkback." This method will be 
employed for drag chute deployment and jettison, display indicators, and landing 
gear extension. Dynamics equations combined with control logic loops and spring/^ 
damper relationships will be implemented for simulation of the remaining LDS. . 
components and subsystems. Spring/damper relationships will be determined from 
actual test data (Ref. 6 .),; Performance parameters associated with the LDS are 
shov/n in Table 4.7-1 . Figure 4,7-6 depicts the LDS simulation module interfaces 
with other simulation modules. 

LDS Reference Data Sources and Data Formats 

Figure 4.7-7., (Ref. 7 ) describes a functional math -flow which, when combined 
with a driver, would serve as an LDS reference module. This reference module would 
provide reference data for verification of the LDS simulation module. The math 
flow shown primarily simulates the LDS dynamical inputs to the EOM. 

A suitable driver routine should be constructed to fully simulate -the LDS. The 
driver would contain crew input response and time delay functions to model those 
components simulated with "talkback" such as landing gear and drag chute deployment, 
steering "on" response,: etc. .Actual hardware simulation resuTLs, will provide 
tabular data and curve fits for air/GN^ spring and shock strut damper characteristics, 
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TABLE 4.7-1. LDS PERFORMANCE PARAMETERS 


PARAMETER 

TYPE^i 

NL6 and MLG "up/down" command 

I 

NLG and MLG "upTocked/dovmlocked" indicator flags 

P 

NLG and MLG mass 

DB 

NLG and MLG "up/down" actuator response time 

I 

' 1 

Landing gear ''down" aerodynamic effects flag 

1 P 

NLG and MLG coordinates 

DB 

Braking forces and moments 

CP 

Brake pedal displacement and rate 

1 

Wheel RPH 

CP 

Brakes "on/off" indicator flag 

CP 

Tire-to-runway braking force coefficient 

DB 

Runway terrain function 

I 

Orbiter landing attitude, attitude rates 

I 

Orbiter vertical velocity 

I 

Orbiter groundspeed 

I 

Orbiter mass 

I 

Orbiter mass center 

I 

Orbiter altitude above runway. 

I 

NLG and MLG strut displacement, rate 

CP 

NLG and MLG GN 2 spring rate 

DB 

TllG and MLG damper constant 

DB 

NLG and MLG tire spring rate ‘ ‘ 

DB 

NLG and MLG tire displacement 

P 

Rudder aero-effectiveness velocity limit; 

DB 

Rudder pedal position 

I 

NLG steering "on" command and indicator 

I. P 

NLG steering actuator command 

I 

NLG steering forces and moments 

CP 

NLG steering angle and angular rate 

I 

NLG steering actuator response time 

I 

Drag chute deploy/ jettison command 

I 

Drag chute deploy/ jettison response time 

I 

Drag chute aero-effects flag 

P 


P “ Performance Parameter 
CP - Critical Performance Parameter 
I - Input 

DB - Data Base Input 
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Runway reference and reference change rate for gear and tips 
Vehicle altitude 
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Gear deflection and deflection rate 
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tire skid angles , tire braking, rolling, and side force coefficients, and 
sequential time delay functions. Note that the nose wheel steering actuator is 
modeled within the math flow for the reference module. The math flow shown should 
also be modified to utilize a "flat earth" model for runway proximity/touchdown 
flight regimes. 

LDS Validation Methods and Check Cases 

Both static and dynamic check cases should be used for LOS validation data 
generation. Check cases may' include static discrete points or consist of dynamic 
input functions and vehicle touchdown trajectories. 

Static check cases would contain discrete inputs such as static loads on the 
landing gear spring shock strut. The static deflection can then be calculated. 

The output data would be plotted as in Figure 4.7-)3 (Ref. 7 ) and the air/GN 2 
spring rate verified. 

Dynamic inputs would consist of time-dependent functions input to the LDS 
simulation and reference modules. A step input to the shock strut could be used 
to validate air/GN 2 spring-hydraulic damper characteristics. Steering reaction 
forces and tire skid angle could be verified using quasi -steady relationships 
involving tire load, velocity, tire side force coefficient, and vehicle steering 
and yaw angle. 

Touchdovjn trajectories and runway profiles could also be used in formulating 
check cases. For example, a special runway profile could be constructed and the 
vehicle "rolled" down a given reference trajectory. LDS response could then be 
evaluated and comparison plots generated for the desired variables. 

LDS Data Base Impact 

Data base requirements for verification of the LDS consist of an appropriate 
reference module, check cases, and tables as required for the various tabular 
lookups of coefficients. When sufficient hardware testing of the LDS has been 
completed, the maximum sizes for these tables will be determined. Some variation 
in storage requirements may result until testing is complete. ! 
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4. 7. 1.2 Docking Mechanism Subsystem (DMS) 

DMS Description 

The DMS provides an active or passive interface to effect a satisfactory Orbiter 
docking/undocking operation with other orbital vehicles. (A passive docking inter- 
face is capable of accepting an active docking system; the active docking mechanism 
can function in either the active or passive mode.) The DMS comprises the actual 
docking interface as well as the extendible tunnel in the docking module kit. In 
the event of a DMS failure which would preclude payload door closure, the DMS may 
be pyrotechnically jettisoned at a separation plane lying below the Orbiter mold 
line (Ref- 5 ). 

Figure (Ref. 9 ) depicts the principal assemblies and systems which 

compose a typical active and passive DMS. The primary DMS components and 
assemblies consist of: 

0 Guide ring assembly 

• Capture latch assembly 

• Body-mounted latch assembly 

® Base and tunnel assembly 

• Attenuator assembly 

0 Retract system 

e Structural ring latch assembly 

© Electrical components (not shown specifically in Figure ) 

• DMS jettison assembly (not shown) 

• DMS extendible tunnel (not shown) 

Initial contact limit conditions for docking are given in Table 4.7-2 
(Ref. 8 ). After vehicle-to-vehicle alignment is attained (via RCS), secondary 
docking alignment is made using the guide system mounted on the guide rings of the 
active and passive vehicles. Capture is effected by a series of latches on the 
extended ring of the active DMS. Following capture and stabilization, the mated 
vehicles are drawn together by the guide ring extension/retraction system. Hard 
dock providing a sealed interface is accomplished using the structual latches 
mounted on the base and tunnel assembly. All extension, retraction and unlatching 
functions are crew controlled. Undocking is accomplished through sequential 
unlatching operations. 
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TABLE 4.7-2 . DMS INITIAL CONTACT LIMITS 


CONDITION 

LIMIT 

Closing velocity 
Lateral velocity 
Rotational velocity 
Miss distance 
Angular misalignment 

0.5 ft. /sec. 
0.1 ft. /sec. 

1 .0 deg. /sec. 
0.5 f t . 

5.0 deg. 


QMS Simulation Module Description and Perfonnance Parameters 

The DMS softwai'e will simulate the operation of the Orbiter DMS during 
docking/undocking maneuvers. This software module will be executed 10 times per 
second in the docking/undocking mission phases. 

Inputs to the DMS simulation module consist of (Ref. 11 ): 

e Orbiter vehicle state 

• Target vehicle state, relative state 

c Crew commands for DMS deployment, jettison, and docking/undocking operations 

• Electrical power available 

c Orbiter and target mass properties 

The DMS simulation module will use these inputs to calculate the docking/ 
undocking reaction forces and moments on the Orbiter and target vehicle. Also 
output are crew response and status indicators for all docking and undocking 
operations including DMS deployment and jettison. 

Vehicle states and relative states in conjunction with DMS specification wi'l 
be used to calculate the reaction forces and moments on both vehicles due to the 
operation of the MDS guide rings, retraction system, and attenuators. DMS deploy- 
ment, jettison and undocking will be simulated as talkback using time delay ■ 
functions incorporating power available checks. Latching operations will also be 
simulated with talkbackj however, vehicle alignment checks must be made to rehpond 
to latching inputs. The performance parameters associated with the DMS are shown 
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in Table '’.y-l . Figure '^.7-in depicts the DMS simulation module interfaces with 
other simulation modules. 

DMS Reference Data Sources and Data Formats 

Complex docking/undocking operations provide a dynamic environment for the DMS. 
This environment requires comprehensive reference data for validation of the DMS 
simulation module. High-fidelity, comprehensive reference data can best be 
generated by a reference software module similar in function to the Figure 4,7-T^ 
functional flow diagram. 

Reference 10 describes, in detail, a well-developed DMS simulation software 
program which can be implemented as a DMS reference module. The Ring-Finger 
Docking Dynamics (RFDD) digital program was developed as an engineering/analysis 
tool for use in determining the docking system loads and attendant vehicular motion 
resulting from docking two vehicles that have an androgynous, six-hydraulic- 
attenuator, guide ring, docking interface similar to that designed for the Apollo/ 
Soyuz Test Project (ASTP). Presently the program will analyze either: (1) docking 

of the Apollo and Soyuz or (2) Shuttle Orbiter to another Orbiter. The RCS 
subroutine is modified to accommodate the appropriate combination (Ref. 10 ). It 
is conceivable that other docking combinations could be simulated with similar 
program changes (e.g. Soyuz-Orbiter, Space Lab-Orbiter, etc.). 

a 

The RFDD program treats the two vehicles and the docking ring as rigid bodies. 
Each rigid body is modeled with six degrees of freedom. A structurally compliant, 
hydraulically attenuated docking interface is simulated between the docking ring 
and the active vehicle. All docking operations except tunnel sealing, hard 
structural latching, and hard docking dynamics are mathematically simulated 
(Ref. 10 ). 

Inputs to the RFDD program are defined as (Ref. 10): 

6 Vehicle (active and passive) mass properties 
6 Vehicle control systems (active and passive) 

9 Attenuator locations and design characteristics 
e DMS design characteristics and constraints 
6 Run configuration indicators 
e Integratiors interval controls 
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TABLE , DMS SIMULATION MODULE PERFORMANCE PARAMETERS 


SYMBOL 

PARAMETER 

TYPE® 

L. 

Orbiter inertia tensor 

I 

=0 



it 

Target inertia tensor 

I 

"•o’ 

Orbiter fnass 

I 

''t 

Target mass 

I 


Orbiter center of mass 

I 

CMt 

Target center of mass 

I 

L>v. 

Orbiter position, velocity 

I 

S _r ,S 

Target relative position and velocity 

I 


Orbiter attitude and attitude rates 

I 


• 



Target relative attitude and attitude rates 

I 




Orbiter-target closing velocity limit 

DB 

<Sy^n 

Orbiter-target lateral velocity limit 

DB 

5 V 

Orbiter-target rotational velocity limit 

DB 

SI™ 

Orbiter-target miss distance limit 

DB 


Orbiter-target angular misalignment limit 

DB 

5>^od.Syoj,k^ 

Relative position of Orbiter DMS 

DB 


Relative (to Orbiter) position of target DMS 

CP 


Active DMS geometry 

DB 


Passive DMS geometry 

DB 

C , R<iclms 

DMS deploy, command/response 

I/P^ 

C,Rjdms 

DMS jettison command/response 

I/P 

C,Rcdnis 

DMS capture latch-unlatch command/response 

I/P 

CjRrdms 

DMS target retract-extend command/response 

I/P 

CjRbdms 

DMS body-mounted latch-unlatch command/response 

I/P 

CjRsdms 

DMS structural ring latch-unlatch command/response 

I/P 


DMS attenuator characteristics (spring constant, damping 



coefficient, travel) 

DB 

^£o,dms 

Orbiter forces due to DMS 

CP 

^ — t.dms 

Target forces due to DMS 

CP 

^ -o,dms 

Orbiter moment due to DMS 

CP 
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TABLE 4.7-3 . (CONTINUED) 


SYMBOL 

PARAMETER 

TYPE® 


Target moment due to DMS 
Electrical power load due to DMS 

CP 

P 


- Input 

P - Performance Parameter 

CP - Critical Performance Parameter 

DB - Data Base Input 

^ - Denotes 2 parameters - command and response 




i 
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FIGURE A,7_in DMS SIMULATION MODULE INTERFACES 
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FIGURE 4.7-11, DMS REFERENCE MODULE FUNCTIONAL FLOW DIAGRAM 
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FIGURE 4.7-n. (COMTINUEO) 
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e Print and plot output controls 

RFDD program output consists of real-time print and optional time-history plots of 
DMS and vehicle loads and motions (Ref. 10 ). 

The RFDD program, when used as a reference module, should be combined with a 
driver which would ensure DMS Simulation Module compatibility and incorporate time- 
delay talkback functions for DMS tunnel extension, jettison, and undocking 
operations. 

DMS Validation Methods and Check Cases 

Check cases for validation of DMS deployment, jettison, and undocking command/ 
response functions can be composed of the required command sequences to verify the 
proper talkback indicators. 

Docking operations should be verified with several check cases containing 
appropriate velocity and misalignment variations to exercise the docking dynamics 
reference and simulation modules for each docking target planned. A typical • 
check case should start the two vehicles within the specified miss distance and 
misalignments, but separated by a relatively large axial distance. The two 
vehicles are then mathematically positioned axially at some predetermined closing 
rate. As contact occurs, load computations, vehicle dynamic calculations, and 
latching simulation continue through draw down.. The printed and/or plotted 
output of both the simulation and reference modules is then analyzed manually or 
automatically -- as determined by the user. 

DMS Data Base Impact 

Once the DMS is defined and the appropriate reference module is selected, 
the primary DMS simulation verification impact upon the verification data base 
will be in the areas of resident reference data and check cases. Additions to 
these requirements must be included for each docking target considered. 
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4 . 7 . 1.3 Separation Mechanisms Subsystem 

This section discusses those mechanical, pyrotechnic-assisted subsystems 
which provide for ET/SRB and Orbiter/ET separation during the ascent mission phase. 

Separation Mechanisms Description 

Shuttle vehicle Orbiter/ET and ET/SRB attach points, umbilical connections 
and corresponding separation mechanism locations are shown in Figure A. 7 -IR 
(Ref. 12 ). 

ET/SRB Separation - The ET/SRB separation mechanisms provide for efficient, 
reliable separation of the SRB's (SRB's indicates both solid rocket boosters) 
from the mated Orbiter/ET vehicle . Included in the ET/SRB separation mechanisms 
are the fore and aft SRB separation fittings and the SRB boost separation motors 
(BSM) as shown in Figures 4.7-14, and 4,7-15 (Ref. 12 ). 

ET/SRB separation, commands are generated by Guidance, Navigation, and Control 
(GN&C) to a sequencer in the Electrical Power Distribution and Control Subsystem 
(EPDCS). At approximately 125 seconds from luanch, pyrotechnic devices in the 
ET/SRB separation fittings (see Figures 4.7-13 and 4.7-1^) are Initiated to 
"guillotine" the SRB's from the ET. The BSM, along with SRM thrust tail-off, 
direct the SRB's away from the Orbiter/ET. Figure 4. depicts the nominal 
separation of an SRB (Ref. 13 ). 

Orbiter/ET Separation - Orbiter/ET separation mechanisms ensure complete separation 
of the ET from the Orbiter prior to orbital insertion. Structural Orbiter/ET 
separation occurs at the single forv/ard and 2 aft ET attach points shown in 
Figure 4. 7-1.2. Figures 4./-17 and 4.7-18 (Ref. 14 ) depict typical fore and aft 
Orbiter/ET separation fittings. Orbiter/ET umbilical disconnect fittings are also 
included in the separation mechanisms. 

Separation sequencing commands from GN&C through the EPDCS, including pyro- 
technic initiation, provide structural release of the ET from the Orbiter as shown 
the Figure 4 . 7 _ig (Ref. 12 ) separation maneuver. 

i 

Separation Mechanisms Simulation Module Description and Performance Parameters 
Simulation of both the ET/SRB and Orbiter/ET separation mechanisms will be 
accomplished using similar techniques involving sequential logic and mechanical 
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FIGURE 4.7-lR. ORBITER/ET AMD ET/SRB ATTACH POINTS 
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FIGURE /''.7-13. TYPICAL FORWARD ET/SRB SEPARATION FITTING 
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FIGURE 4.7-14. TYPICAL AFT ET/SRB SEPARATION FITTING 
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FIGURE ^.7-1-6=. NOMINAL SRB SEPARATION 
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FIGURE 4.7-17. FORWARD ORBITER/ET SEPARATION FITTING 
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FIGURE 4.7-18. AFT ORBITER/ET SEPARATION FITTING 
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functions to effectively model the actual system (Ref. 11 ). 

Figure ^.7-20 depicts the separation mechanisms subsystem simulation module 
interfaces. Table 4.7-4 is a listing of the module parameters. 

ET/SRB Separation Mechanisms Simulation - The ET/SRB separation mechanisms 
simulation module will receive pyro-initiate and separation motor ignition commands 
from GNSC. Response to pyrotechnic SRB separation and BSM will be simulated via 
’’talkback." As BSM burn time is approximately 0.75 seconds, BSM thrust will be 
simulated with the proper impulsive thrust vector for each rocket motor. SRB 
separation produces no appreciable forces or moments on the Orbiter/ET vehicle 
unless a separation failure occurs. Tracking of the separated SRB continues until 
SRB burnout. 

Sequencing of SRB separation will set flags to load new data tables in the 
Aerodynamics and Mass Properties simulation modules, as shown in Figure 4.7-20. 

Orbiter/ET Separation Mechanisms Simulation - Orbiter/ET separation simulation will 
use sequential time delay functions to provide the "talkback" response for the 
Orbiter/ET separation mechanism pyrotechnic devices and Orbiter/ET umbilical 
disconnects. Flags will also be set for aerodynamic and mass properties table 
V'e-initializations. Significant separation forces and moments are applied to the 
Orbiter due to the two rear ball and socket structural attachment designs. 

The Orbiter reaction separation forces and moments for the ET rear ball and 
socket and forward attachments will be computed using simultaneous equation 
solutions incorporating mechanical functions to effectively model the structural 
attachment design. Computed forces and moments will be output to the Equations of 
Motion (EOM) simulation module as shown in Figure 

Separation Mechanisms Subsystem Reference Data Sources and Data Formats 
Successful ET/SRB separation has little effect on Orbiter EOM; thus no 
reference software module is necessary. Verified response to the separation 
pyrotechnic commands and BSM ignition and corresponding burn time will assure 
successful simulated ET/SRB separation. Separated SRB relative-state tracking 
will provide post separation Orbiter/ET-SRB proximity relationships. 
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PARAMETER 

TYPE^ 

SRB pyro-device separation command/response*^ 

I, CP 

BSM ignition command/response 

I, CP 

BSM coordinates 

DB 

BSM thrust 

DB 

BSM burn time 

DB 

SRB tail -off thrust 

DB 

SRB mass properties 

I 

SRB relative state vector ■ 

I 

ET umbilical pyro-di sccnnect command/response 

I, CP 

ET separation command/response 

I, CP 

ET separation forces on Orbiter 

CP 

ET separation moments on Orbiter 

CP 

ET mass properties 

I 

Orbiter mass properties 

I 

Orbiter/ET forward attach ooint coordinates 

DB 

Orbiter/ET forward attach point design constraints 

DB 

Orbiter/ET aft (2) attach point coordinates 

DB 5- 

Orbiter/ET aft attachment ball function 

DB 

Orbiter/ET aft attachment socket function 

DB 

Ball /socket coefficient of friction 

DB 

Orbiter state vector 

I 

Orbiter attitude and attitude rates 

I 

ET relative state 

I 

ET relative attitude and attitude rates 

I 


- Input 

P - Performance Parameter 
CP - Critical Performance Parameter 
DB - Data Base Input 

^Indicates 2 parameters (command and response) 
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A suitable reference data source for Orbiter/ET separation is described in 
Figure ^-.7-21 math flow. The subroutine shown, ABIND, is used in the SVDS 
simulation/analysis program. For verification purposes, ABIND would be incorporated 
into a special driver as described in Section 4.2. 


Inputs to ABIND consist of: 

© Position vectors to- the Orbiter/ET attach points 
e Relative position vectors for the Orbiter and ET 
c Several transformation matricies (ECI to body coordinates, body 
coordinates to attach points, etc.) 

• Vehicle attitude rates for the Orbiter and ET 
e Relative vehicle attitude rates for the Orbiter and ET 
e Orbiter and ET mass properties 
t Radii of rear attach point ball and socket 

e Spring constants, damping coefficients, and coefficients of friction for 
ball and socket 

e A defined region about each socket 


Orbiter reaction forces and moments from the separated ET are computed for 
output to vehicle EOM. 

Separation Mechanisms Subsystem Validation Methods and Check Cases 

Since ET/SRB and Orbiter/ET separations are dynamic events, dynamic check 
cases are required to accurately verify the Separation Mechanisms Subsystems 
simulation modules. 


In the case of the ET/SRB separation mechanisms, verification includes the 
checkout of; (1) the proper sequencing of pyrotechnic devices and BSM ignition, 

(2) correct BSM burn time and thrust, (3) SRB tail -off thrust, and (4) tracking 
of the SRB after separation to monitor Orbiter/ET-SRB proximities, The above 
parameters can be monitored during an actual simulation run to validate successful 
SRB separation mechanisms simulation. 


Two parameter types must be verified to accurately check proper Orbiter/ET 
separation mechanism simulation. The correct pyrotechnic sequencing can be 
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validated with a simple sequence check of the desired pyrotechnic parameter. 

After verifying the pyrotechnic sequencing, the actual Orbiter/ET separation 
forces and moments due tp the aft attach points must be verified. These forces 
and moments can best be validated through the use of a reference module similar to 
the one previously discussed. A check case incorporating a specific reference 
trajectory should be developed and exercised with the simulation and reference 
modules. Analysis of comparison plots of the simulation data and reference data 
would provide sufficient verification of the simulation module. 

Previous simulations of Orbiter/ET separation have shown approximate aft 
attach point maximum forces of: 

Right rear attach point-; Fx =-1092.0 lbs.. 

Fy =-2.0 lbs. 

Fz = 200.0 lbs 

Left rear attach point; Fx = -713.0 lbs. 

Fy = -220.0 lbs. 

' Fz = 40.0 lbs. 

(Note: ET coordinate system) 

Separation Mechanisms Subsystem Data Base Impact 

Separation Mechanisms Subsystem verification is expected to have a minimal 
impact upon the verification data base as only various pyrotechnic sequencing 
checks, a small reference module for the ET aft attachment separation forces and 
moments, and check cases incorporating resident reference trajectories are 
required. 
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4. 7, 1.4 Actuation Mechanisms Subsystem (AMS) 

AMS Description 

The Shuttle AMS provides for crew - or computer-initiated control of various 
mechanical devices. Actuators used on the Shuttle function as servomechanisms 
(i.e., power-amplifying feedback control systems) in which the controlled variable 
is mechanical position (Ref. 15 ). Both electromechanical and hydraulic actuators 
are included, along with their corresponding valves, switches, servomotors, and 
linkages. 

Electromechanical actuators receive as inputs electronic control signals- A 
servomotor or electronic switch is then used, along with a feedback loop, to effect 
the commanded mechanical position. Figure 4.7-22 (Ref. 15 ) depicts a general block 
diagram of an electromechanical actuator. Electromechanical actuators are used 
on the Shuttle for control oi': 

f Payload bay doors and radiator positions 

t The Payload Deployment and Retrieval System (see Section 4. 7. 1.5, PDRS) 

• Docking tunnel extension and docking operations (see Section 4. 7. 1.2, DMS) 

» QMS gimbal position 

• Drag chute engagement 

• Various other remotely operated doors and latches (star tracker door, ADS 
.and RCS deployment, umbilical doors, etc.) 

Hydraulic actuators generally act as mechanical linkages in controlling 
mechanical position. Hydraulic power from the Orbiter HpS (Section 4. 7. 1.6) is 
used in conjunction with servovalves, regulators, and power amplifiers (hydraulic 
cylinders) to provide the commanded. mechanical position. As hydraulic actuators 
are servomechanisms, a control feedback loop is also used as shown in the 
Figure 4.7-23 block diagram (Ref. 15 ). Hydraulic actuators are employed for 
control of: 

e Landing gear uplock release, extension, steering, and "1-6" retraction 
(see Section 4. 7. 1.1) 

§ Orbiter braking and antiskid functions (discussed in Section 4.7.1 .1); 

© Aero-surface positions (including body flap) ! 

0 Main engine gimbal position and shutoff valves ’ - 

0 SRB gimbal position (note: each SRB incorporates a self-contained HPS 

and therefore does not interface with the Orbiter HPS (Ref. 16 ) 
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FIGURE 4.7-22. BLOCK DIAGRAM; ELECTROMECHANICAL ACTUATOR (TYP) 
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AMS Simulation Module Description and Performance Parameters 

Shuttle AMS simulation is discussed in this section as two submodules; 
Electromechanical and Hydraulic. 

Electromechanical Actuation Simulation Module - Electromechanical actuator 
simulation will provide the necessary real-world actuator representation desired in 
a training simulator. Shuttle electromechanical actuators will be modeled using 
two fidelity-defining methods. 

Several electromechanical actuators will be simulated using time-delay functions 
to effect "talkback" response. Inputs to this type of actuator consist of crew/ 
computer device position signals, switch positions, and electrical power available 
(from Orbiter EPS). Output will represent the "talkback" response to indicate 
mechanical position and electrical power required for the desired operation. 

Actuator functions modeled with this technique consist of: 

• Docking tunnel extension 

9 Drag chute engagement 

9 Operation (open and closure) of various remotely-operated doors and latches 

The remaining electromechanical actuators will be simulated with a more 
complex technique. This technique will use specific transfer functions and control 
feedback loops similar to the Figure 4.7-24 diagram (Ref. T5 ). The exact transfer 
functions and control logic (determined from hardware tests) will simulate non- 
linear actuator characteristics involving friction, hysteresis, deadband zones, and 
combined electrical pov/er load effects to model actuator lags, overshoots, and rise 
time variations (Ref. 11 ). 

Inputs will be similar to those discussed in the "talkback" model; however, 
outputs will be a dynamic mechanical position, thrust vector, and/or crew/computer 
responses as indicated in the Figure a. 7-25 diagram of Electromechanical Actuator 
Mechanisms Simulation Module Interfaces. Performance Parameters associated with 
electromechanical actuator simulation are given in Table 4.7-5 . 

Hydraulic Actuation Mechanisms Simulation Module - Most Shuttle hydraulic actuators 
will be simulated in a manner similar to that used for complex electromechanical 
actuator simulation. Only the landing gear uplock release and extension retract 
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R(s) = input command 

E(s) = actuating signal 

C(s) = output command 

G(s) = direct transmission function 

H(s) = feedback transfer function 
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TABLE 4.7-5 . AMS SIMULATION MODULES PERFORMANCE PARAMETERS 


SYMBOL 

DESCRIPTION 

TYPE‘S 

Sc 

Commanded mechanical position 

I 

Sc, 

Limited commanded mechanical position 

P 

c 

Position error command 

P 

Is.iJ] 

Mechanical position deflection, rate, and acceleration 

CP 

{Si , 4 > i 

Limited mechanical position deflection, rate, and 
acceleration 

P 

( $nan ) 

Maximum mechanical position deflection, rate and 
acceleration 

DB 


Engine thrust ■ 

I 


Output thrust vector (where applicable) 

CP 

K 

Forward gain 

DB 


Rate feedback gain 

DB 


. 

Position feedback gain 

DB 


Actuator transfer functions 

DB 

Be 

Electri.cal. power available 

I 

Bjt. 

Electrical power required 

P 

£f 

Electrical power factor 

P. 

HPe 

Hydraulic power available 

I 

HP^ 

Hydraulic power required ' • 

P 

HPf 

Hydraulic power factor 

P 


Actuator gimbal coordinates (where applicable) 

DB 


*'1 - Input 
DB - Data Base Input 
P - Performance Parameter 
CP - Critical Performance Parameter 
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hydraulic actuators v^ill be simulated with a time-delay "talkback" response combined | 

with a hydraulic power available/required check. • i 

All other Shuttle hydraulic actuators will utilize transfer function - control 

5 

feedback techniques to accurately model the desired actuator. Actuator transfer i 

functions and control feedback loops will be determined from tests performed in the \ 

Flight Control Hydraulic Lab (FCHL). The transfer functions will compensate for | 

actuator friction, hysteresis, and deadzones associated with mechanical linkages as | 

well as hydraulic power load sharing (Ref. 5 ). I 

I 

L 

Inputs to the Hydraulic Actuator Mechanisms Simulation Module consist of: I 

« Crew/computer device position commands (discretes and combinations) i 

I 

§ Hydraulic power available I 

e Electrical power available 1 

Outputs will include dynamic mechanical positions and rates (e.g., aero-surface i 

deflections), crew/computer response signals and hydraulic power required. In the j 

case of thrusting devices (SSME, SRB gimbals)- body-axis thrust forces and mome:nts || 

will also be output. Hydraulic Actuator Mechanisms Simulation Module Interfaces || 

are depicted in Figure 4.7-26. Corresponding module performance parameters are j! 

shown in Table 4.7-5 . ■ jj I 

. ' li 

Jr 

?/ 

PMS Reference Data Sources and Data Formats , j 

Verification of electromechanical and hydraulic actuator mechanism simulation I 

I 

modules can be accomplished through the use of reference data generated with a | 

generalized Actuator Simulation Reference Module as depicted by Figure 4.7-27, I 

I 

(Ref. 17 ). Only one reference module is necessary for the two types of actuator | 

||. 

simulations, as the same general concept applies to both (i.e., both are servo- I 

mechanisms employing transfer functions and control feedback loops). Overall I 

command, acceleration, rate, and position limiting combined with the necessary | 

integrations yield similar results in each case (mechanical position). I 

6 

Differences will arise, however j in the actual transfer functions, gains .and p 

rate limiting curves applicable to each actuator type. These variations will (also p 

occur with respect to each individual, actuator. Thus, a special driver must be f 

constructed to direct the loading and initializing of tabular data defining each I 
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actuator. The tabular data will contain information regarding: 

• Actuator type (electromechanicai or hydraulic) 

• Individual actuator transfer functions, gains and limit curves 

e Power required computations (electrical, hydraulic or a combination) 

Also included in the driver would be the time delay functions required to simulate 
those actuators which require "talkback" response. 

AMS Validation Methods and Check Cases 

The AMS Simulation Module should be verified through the use of reference data 
generated with a suitable reference module, as previously described. In some 
instances, actual hardware tests might be used as a reference data source (e.g., 
aero-surface actuators evaluated in the FCHL); however, the use of reference 
software as a data source is generally more efficient than test data in verification 
•processes (see Section 4.2). 

Simple "talkback" response to actuator commands is easily verified using simple 
check cases involving both parameter sweeps and discretes to evaluate indicator 
flags, time--delays, and specific switch logic and sequencing. 

More complex actuators must be evaluated using dynamic check cases, whifch 
.provide the most accurate means of verifying simulated actuator response. Check 
cases for each actuator (electromechanical or hydraulic) should contain one or 
more command sequences which exercise the actuator throughout its nominal and 
maximum operating range. Table 4.7-6 (Ref. 17 ) describes one such sequence for 
the aero-surface actuators. Actuator response characteristics can then be 
plotted as shown in Figures 4.7-28 and 4.7-29 for the QMS engine gimbals (Ref. 17 ). 
Selected performance parameters can also be output for verification analysis. The 
above check case operations can be performed using the simulation module and the 
reference module, with time-histories of their corresponding performance parameters 
compared by either manual or automated techniques (see Section 5.3). 

AMS Data Base Impact 

Data base requirements for verification of the AMS Simulation Module consist of 

© A generalized actuator reference module ; 

e Tabular information for each individual actuator (used in the reference 
module) 
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• Suitable check cases for each actuator 

• Reference data generated with the reference module 

Overall impact on the verification data base is greatly dependent upon the storage 
requirements of the tabular information required for each actuator to be verified. 
After considerable hardware tests have been conducted, these storage areas should 
remain relatively constant in size. Some variations are expected to occur during 
Shuttle development and testing. 


4.7-76 


MCaONfVSILL. DCfUGLjiiZS J^STRO/S/AUTritCS GOMPANV • EAST 


MDC El 136 
27 January 1975 

4. 7. 1.5 Payload Deployment and Retrieval System (PDRS) 

. This section describes the components, functions, parameters, and verification 
of the software module required to simulate the Orbiter Payload Deployment and 
Retrieval System (PDRS) used in the On-orbit mission phase. 

PDRS Description 

The PDRS comprises the Payload Retention Mechanism (PRM) and 'the Payload 
Deployment and Retrieval Mechanism (FORM). Functions of the PDRS include .payload/ 
target (P/T) manipulation and support services, docking assistance, and inspection 
capability (Ref. 5 ). 

The PRM consists of a system of guides, latches, and release mechanisms 
which provide the capabilities for easy and reliable payload installation, 
removal, or changeout (Ref. IB ). 

The PDRM is located in the payload bay and on the flight deck of the Orbiter. 
The components of the PDRM are- listed as follows (Ref. 5 ); 

• Manipulator Retention Latches (MRL) 

• Manipulator Deployment Mechanism (MDM) 

• Manipulator Jettison Subsystem (MJS) 

• Shuttle Attached Manipulator Subsystem (SAMS) 

The MRL is used to support and lock the manipulator arm in the stowed position. 

The manipulator arm assembly is deployed and retracted via the MDM. The MJS 
separates the manipulator and its retention latches from the Orbiter should a 
failure occur which v/ould preclude the complete stowing of the manipulator 
assembly. 

The SAMS controls and affects actual payload handling Using the Control 
Servo Input (CSI) unit and the Follow Up Output (FUO) unit. The CSI controls 
the FUO, the manipulator arm assembly, using crew commands to and feedback 
information from the FUO. Control transfer is accomplished with an electronic 
interface between the CSI and the FUO containing a resolver. 
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Only one manipulator arm assembly with its associated MRL, MDM, MJS, and 
electronics is standard on the Orbiter; however one additional assembly is optional 
and payload chargeable (Ref. 19 ). Figure ^.7-30 depicts the mechanical components 
of the FORM. 

PDRS Simulation Module Description and Performance Parameters 

The PDRS simulation software module will simulate those functions performed 
by each element of the actual Or' iter PDRS. Simulation fidelity of the PDRS 
elements are; (1) PRM - talkback, (2) MRL - talkback, (3) MDM - low, (4) MJS - 
talkback, (5) SAMS - high. 

Inputs to the PDRS software module consist of: '■ 

• Payload bay geometric constraints 

• P/T type and placement status 

• SAMS operator/control logic commands 

• Electrical power available 

• Orbiter vehicle translational and rotational states and rates 

• P/T translational and rotational states and rates 

• Orbiter mass properties 

• P/T mass properties 

^ 5 ■ 

The PDRS software will then provide: 

• Manipulator arm retention, deployment, jettison status 

• ?ayload retention status 

• Manipulator arm assembly dynamics 

• P/T attachment status 

• Light, camera, monitor operations signals 

• Electrical power system (EPS) loadings 

• P/T Orbiter collision status v/hen attached 

Simulation of PRM, MRL, MDM, and MJS activation will be accomplished through 
the use of the following sequence: (1) crew switch set to indicate desired 

operation; (2) power required/power available check performed; (3) appropriate 
time delay; (4) crew response indicator set. 
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However, simulation of the SAMS will involve the simulation of the dynamics 
and -interfaces of the manipulator arm assembly. The arm assembly dynamics will 
be simulated by solving the equations of motion associated with each manipulator 
arm joint in the Orbiter - manipulator arm - P/T system. Factors affecting the 
solution of these equations are: 

• Manipulator arm instantaneous geometry 

• CSI simulation input commands 

• Simulated servo motor response to input commands 

• Manipulator arm joint geometric limitations 

• Reaction forces and torques at each manipulator arm joint due to 
Orbiter - P/T 

A simplified description of one manipulator arm joint depicting the joint reactions 
is shown in Fig. ^. 7 - 31 . Solution of the equations for the Orbiter - manipulator 
arm - P/T system will enable the software module to determine: 

• True manipulator arm joint positions and rates 

• Joint potentiometer and tachometer outputs 

• Povjer required for the operation performed 

• End effector status {P/T attach/release) 

I ^ 

The simulation of the manipulator arm associated visuals will be accomplished 
utilizing a Computer Generated Image (CGI) technique. The CGI software interface 
module will receive outputs from the SAMS simulation module describing manipulator 
arm positions and angles, as well as camera and light operation. Based upon 
these inputs, the CGI will generate the associated visuals using its data base 
as described in Section 4.4.1. 

The perfotmiance parameters described in Table 4.7-7 were selected using the 
criteria developed in Section 4.1. The execution rate of the PDRS simulation 
module will be 10 times per second. This will provide an update rate compatible 
with the mass properties module during attachment/docking as described in 
Section 4.5.3. PDRS simulation module interfaces with other Orbiter simulation 
software modules are given in Fig. 4.7-32. 
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TABLE 4.7-7 PDRS PERFORMANCE PARAMETERS 


t ' — 

Symbol 

Parameter 

Type ^ 

' 

F 

Orbiter body forces 

I 

i-p 

^P/T 

P/T^ body forces 

I 

I 

I 

Orbiter inertia tensor 

ip/T 

P/T inertia tensor 

I 

I 


Orbiter mass 

«P/T 

P/T mass 

I 


Orbiter center of mass 

I 

CMp^T 

P/T center of mass 

I 

r, y 

Orbiter position, velocity 

I 

Sr, Sy 

P/T relative position and velocity 

I 

^^P/T>^P/T ' 

P/T relative angular orientation 


%T 


I 

T 

PRM actuation response time 

prm 

I 

"^mrl 

MRL actuation response time 

mdin 

MDM actuation response time 

I 


MJS actuation response time 

I 

mjs 

I 

Tee 

End effector grasp/release response time 

K 

■^niin,i ; 

FUO joint geometric limits 

I 

■%nax,i 



1 

FUO end effector extension limit 

I 

ee,max 


C 

PRM command 

I 

prm 


I 

^mrl 

MRL command 

^mdm 

MDM comriand 

I 

C . 
mjs 

MJS command 

I 

'^c.i 

Camera operation command 

I 

‘=1 .1 

Light operation command 

I 

C 

ee 

End effector grasp/release command 

I 

Sr 

-c 

FUO translational position command 

I 


FUO translational rate command 

I 
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TABLE 4.7-7 continued 



Parameter 

Type ^ 

^0C, ^c, 

FUO end-point attitude conmand 

I 

h'c 

5 0c , , 

FUO end-point attitude rate command 

I 

Sc 

Camera operation status 

P 

Se 

Light operation status 

P 

See 

End effector status (grasp/release) 

CP 

^-fuoji 

FUO jettison status 

P 

FUO joint positions in orbiter axes 

CP 


FUO end effector position in orbiter axes 

CP 

^'^uoji ’ 

FUO joint rates and accelerations 

P 

"^fuoji^ 

1 1 1 

FUO end effector extention, rate and acceleration 

P 

ee ) ee , ee 

FUO joint orientation matrices 

CP 

*^^fuo,i^ 

FUO joint potentiometer outputs 

p 

^^fuo,i^ 

FUO joint tachometer out-puts 

p 

^WuOji^ 

FUO joint torques • 

CP 

5F 

-o,prm 

Orbiter forces due to PRM 

p 

5F 

-Ojsams 

Orbiter forces due to SAMS 

CP 

^^/T,prm 

P/T forces due to PRM 

p 

^-P/T,sams 

P/T forces due to SAMS 

CP 

L 

-0 

Total moment on orbiter 

CP 

-P/T 

Total moment on P/T 

CP 

-0 jpdrs 

Orbiter moment due to PDRS 

CP 

-P/T,pdrs 

P/T moment due to PDRS 

CP 

^pdrs 

Electrical power load due to PDRS 

CP 


P/T denotes payload/target 
FUO denotes the manipulator arm 


I - Input 

P - Performance Parameter 
CP - Critical Perfonnance 
Parameter 
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PDRS Reference Data Sources and Data Formats 

The numerous dynamic functions performed by the PDRS Simulation Module require 
verification reference data over a wide operational range. Test data would not be 
completely adequate as verification reference data due to actual test limitations. 

It is then necessary to use a reference software module for reference data generation. 

Presently, no readily available math model exists which simulates the Orbiter 
PDRS. However, Figures a. 7-33a and 4. 7-33b depict a conceptual, functional flow 
diagram of a math model which can be combined with a driver to form a suitable PDRS 
reference module. This reference module, when implemented and exercised with 
carefully designed check cases, will supply reference data for the validation of 
the simulated functions of the PRM, MJS, MDM, MRL, and SAMS. 

The reference module driver will control module input/output and ensure PDRS 
Simulation Module compatibility. Reference module inputs and outputs consist 
essentially of the corresponding parameters and parameter groups listed in 
Table 4.7-.? and shown in Figure 4.7-32 . Minor variations between simulation and 
reference module internal parameters may result due to formulation differences, 
but principal inputs and outputs will be compatible. Other input/output require- 
ments unique to the reference module will be specifically related to the user- 
designated quantity and fidelity of the desired output verification reference data. 

Reference module simulation of the MJS, MDM and MRL response uses a talkback 
technique. Eventually, as hardware is developed and test data becomes available, 
time-delay functions should be incoporated simulating the actual time-delay 
talkback response. The PRM talkback response is also simulated in this manner. 

Complete PRM simulation involves a time-delay talkback response function 
coupled with the appropriate force and moment calculations. PRM reactions forces 
and moments are used by the Orbiter and P/T equations of motion and based upon: 

0 PRM design and location(s) 

« P/T type 

e P/T relative position, velocity, and orientation 
e PRM operation commands 
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FIGURE 4.7-33a. PDRS REFERENCE MODULE FUNCTIONAL FLOW 
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SAMS simulation verification is concerned chiefly with the dynamics of the 
FUO. Operator commands to the FUO require that the reference module SAMSF 
subroutine (Figure 4. 7-33 b) compute; 

• FUO arm joint torques 

t FUO position dynamics (SAMS reaction forces and moments) 
e FUO-Orbiter-P/T collision constraints 

• FUO potentiometer and tachometer outputs 

I 

Actual SAMSF formulations and electromechanical actuator transfer functions 
(see Section 4. 7. 1.4) will be derived from empirical data obtained from hardware 
tests of the SAMS, and may experience some modification as the SAMS design evolves. 
Additional automatic command sequences may also be implemented for standard FUO 
positioning (less P/T) as required for FUO stowing, deployment, or Shuttle vehicle 
inspection (Ref. 9 ). 

PDRS Validation Methods and- Check Cases 

’ — S , - ' — ■ ■ ■ 1 ■ - 

Check case design for verification operation of the MDM, MRL, and MJS should 
consist of simple discrete command sequences. In sequencing the various commands 
through the simulation and reference modules, the corresponding talkback response, 
sequence check flags, and time-delays can be evaluated and analyzed. Low-fidelity 
(talkback) response of the PRM can also be verified through similar check case 
design. 

Complete verification of the PDRS requires that the PRM and SAMS be verified 
with dynamic check cases. For both the PRM and SAMS, one or more check cases must 
be designed -for each P/T and/or FUO operation planned. Each check case should 
verify the complete command sequence and SAfiS response for stowing, deployment, 
retrieval and other manipulations of payloads with appropriate masses and inertias. 
Other dynamic command sequences should be used to evaluate the response and 
positioning of the FUO without an attached P/T. Previously discussed command 
sequences should be similar to the aero-surface command sequence shown in 
Section 4. 7. 1.4, although much more complex. 

PDRS Data Base Impact 

Data base requirements for verification of the PDRS consist of: 

© Reference module as described 
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e Reference data generated with the reference module 
a A variety of check cases which exercise all planned PDRS operations 
f The necessary tables, tapes, and/or service routines required for PDRS 
Simulation Module verification 

During PDRS simulation development, changes in the PDRS portion of the verification 
data base will occur. Most of the impact will be minor, unless a significant 
hardware modification is made. Other changes in the PDRS data base may be 
required, if payload masses/inertias and operational sequences outside of the 
previously-validated range are added later in the program. 
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4. 7. 1.6 Hydraulic Power Subsystem (HPS) 

HPS Description 

The hydraulic power system provides power to actuate the aerodynamic flight 
control surfaces, main engine gimbals and engine controls, main and nose landing 
gear deployment, speed- brakes , main landing gear brakes, and nose wheel steering. 
Figure 4.7-3'^ illustrates the' functional configuration of the HPS (Ref. 20 ). The 
HPS consists of three main hydraulic pumps, each driven by an auxiliary power unit 
(APU), connected to the hydraulic system loads. 

HPS Simulation Module Description and Performance Parameters 

The HPS simulation module will be divided into four main groups of generally 
related engineering equations. These equations will simulate hydraulic load, 
stored, accumulator energy, pump-reservoir capability, and hydraulic fluid tempera- 
ture and heat load. 

Signals will also be provided to indicate crew display of hydraulic fluid 
temperature and quantity as well as caution and warning displays relating high or 
low fluid temperature and low fluid quantity or pressure (Ref. 11 ). 

Figure 4.7-35 depicts the HPS simulation module interfaces with other 
simulation modules. An example of module interaction and influence is that of the 
continuous dynamic loads on the aerodynamic control surfaces affecting HPS pressure 
and reservoir level. Table 4.7-8 provides a list of the HPS performance parameters 
(Ref. 21 ). These parameters are also reflected in Figure 4.7-37. 

HPS Reference Data Sources and Data Formats 

HPS verification reference data should be generated with a reference module 
functionally equivalent to the functional HPS reference module flow shown in 
Figure 4.7-36 . Reference 22 describes an existing program which could be 
effective as a reference data source. As described, the Space Shuttle Hydraulic 
POWER Program assumes that all design dependent data is available from the Orljiter 
contractor (Rockwell). User-supplied information consists of output options , ? 
mission dependent data, and operational data for each mode to be analyzed. Special 
care must be exercised in coordinating the specific mission and design-dependent 
data (Ref. 22 }. 
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TABLE 4.7- 8 HYDRAULIC POWER SUBSYSTEM PARAMETERS 


PARAMETER NOMENCLATURE 

DATA RANGE 

TYPE® 

LOW 

HIGH 

UNIT 

RESERVOIR FLUID TEMP 

-75 

+300 

DEG F 

CP 

RESERVOIR FLUID VOLUME 

0 

+100 

PCNT 

P 

RESERVOIR FLUID LVL LOW 

NORM 

LOW 

EVENT 

CP 

SUPPLY PRESS A 

0 

+4000 

PSIA 

P 

SUPPLY PRESS B 

0 

+4000 

PS I A 

P 

FWD DISTR PRESS LINE TEMP 

-75 

+300 

DEG F 

P 

FLUID HEATER OUTLET -TEMP 

-75 

+300 

DEG F 

P 

AFT COMPT RTN LINE TEMP 

-75 

+300 

DEG F 

P 

CIRCULATION PUMP PRESS 

0 

+500- 

PSIA 

P 

CIRCULATION PUMP-ON 


ON 

EVENT 

I 

BACK-UP CIRCULATION PUMP ON 


ON . 

EVENT 

I 

MAIN ENGINE SUPPLY VLV-CLOSE 


ON 

EVENT 

I 

READY FOR APU START-ON 


READY 

EVENT 

I 

BOILER WATER TEMP 

0 

+250 

DEG F 

I 

HaO BOILER FLUID VOLUME 

0 

+100 

PCNT 

I 


a 

P - Performance Parameter 
CP - Critical Performance Parameter 
I - Input 
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FIGURE 4.7-35. HPS REFERENCE MODULE FUNCTIONAL FLOW DIAGRAM 
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The POWER program provides an analysis of the flow, power, and thermal 
characteristics of the Orbiter HPS. Program outputs consist of (Ref. 22 ): 

$ Input card- images 

e Type I actu'ator data (Type I actuators are variable rate) 

fe' Actuator operational mode status 

c Mission flow 

g Power and thermal profiles 

g Pump characteristics for the mission 

i Individual actuator flow ' 

• Individual actuator thermal profiles 
e Total mission system power 

HPS Validation Methods and Check Cases 

Check case construction for verification of the Orbiter HPS should contain 
the correct inputs (system and module dependent) for both the simulation and 
refernece modules which exercise the complete HPS for the mission phase and/or 
operating conditions of interest. The ascent and entry mission phase are most 
important, as the HPS is not used in the on-orbit phase. Either a partial or 
complete mission phase_ check case can be executed to generate plots similar to the 
APU load profile shown in Figure A. 7-37 (Ref. 5). Load profile data — power, 
thermal, and flow -- should be generated and output (print, plot, and/or mass 
storage) for verification analysis. A complete verification requires that HPS load 
profiles be generated for each Orbiter hydraulic actuator and actuator group as 
well as the entire HPS. 

Data Base Impact 

Data base impact for HPS Simulation Module verification will consist of: 
e A suitable reference module 
e Resident reference data and check cases 
0 Resident data required by the refernece module 
Impact to the verification should not expand unless significant changes are made 
to the HPS. 
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4.7.2 Purge and Vent (P & V) Subsystem 

The Orbiter P & V subsystem is very simple in form and function, and little 
or no simulation requirements exist for this subsystem on any of the simulators 
of interest to this study. Therefore, this section provides .only a brief 
description of the P & V subsystem and a possible simulation module; validation- 
oriented subsections are omitted: 

4 . 7.2.1 P & V Subsystem Description 

The P & V subsystem performs the following functions: 

• purging of various Orbiter cavities and lines using an inert gas 
(He or N 2 ) 

• ' venting of various Orbiter cavities to relieve differential pressures 

and eliminate outgassing products 

• detection of hazardous gases (e.g., from leaks in reactant storage 
systems) 

« provision and application of rain repellent for the Orbiter windshield 

Figures 4.7-38 and 4 . 7 - 30 , from Ref, 12, provide an overview of the P & V 
subsystem layout and its GSE interface. Additional layout detail, if needed, 
is provided by Ref. 23. Additional discussion of the GSE interface will be 
found in Section 4. 3. 2. 3. 

• « 

As indicated by Figure 4.7-38, the only purging capability self-contained 
within the orbiter is dry-nitrogen purging of the windshield cavity. This 
purging is initiated manually by the flight crew whenever necessary (e.g., if 
fog or ice appears between the windshield panes), 


Venting of Orbiter cavities is necessary primarily during periods of rapid 
external pressure change; e.g., ascent and entry. Both "active" and "passive" 
vents are provided. Passive vents are simply fixed holes in the Orbiter skin. 
Active vents consist of valves or doors which are opened and closed at appropriate 
times — either manually, cued by the flight crew timeline, or automatically by 
the onboard sequencing system. 

Hazardous-gas detection is apparently a prelaunch function, since no 
detector outputs are shown by Ref. 21 (see below). 

4.7-98 
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4.3. 2. 2 P & V Simulation Module Description and Performance Parameters 

Prelaunch purging operations (if simulated) will fall under the Prelaunch/ 
Launch Interface Module, Section 4. 3. 2. 3. The remaining P & V functions, if 
simulated at all, will probably be implemented only as talkback of manually- or 
automatically-initiated discretes. The potential performance parameters are 
listed in Table 4.7-9; no critical performance parameters are indicated, 

Table 4,7-9. p & V Simulation Module Parameters 
PARAMETER 

Window cavity safety valves (#1,2, 3, 4, 5) open/closed 

Window rain repellent tank quality 

Orbiter vent doors open/closed 

Payload bay vent doov'S (left, right) open/closed 

Forward thruster vent doors (left, right) open/closed 

Left forward fuel vent door open/closed 

Right forward oxidizer vent door open/closed 

Fuselage vent doors (left, right/ forward, mid, aft) open/closed 

Aft wing vent doors (left, right) open/closed 

Left OMS/RCS fuel vent door open/closed 

Rfght OMS/RCS oxidizer vent door open/closed 

Fin vent door open/closed 
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The Orbiter Propulsion and Fuel System comprises the Main Propulsion Sub- 
system (MPS) and External Tank (ET), the Solid Rocket Motors (SRM), the Orbital 
Maneuvering System (OMS), and the Reaction Control Subsystem (RCS). This section 
discusses the functions, simulation,' and, simulation verification of each of these i 

systems and subsystems. | 


4. 7. 3.1 Main Propulsion Subsystem and External Tank (MPS/ET) | 

i 



The Orbiter MPS and ET are composed of the three, clustered aft Orbiter main 
engines, the external propellant tank (which separates from. the Orbiter prior to 
orbital insertion), the Main Engine Controller (MEC), the pneumatic control 
subsystem, and assorted valves, pumps, and components. 

Thrust and gimbal commands are generated by the avionics system (although the 
Shuttle also has a manual throttl ing capabil ity) in response to sensed accelerations, 
computed position and velocity, and intended orbit. The MPS then provides the 
actual thrust. ■ 

MPS thrust is controlled by the MEC. The MEC is an electronic device installed 
on each main engine which, along with engine sensors, valves, spark igniters, 
actuators, etc., provides the following SSME functions; 

© Sensor excitation and valve/igniter control signals 

© Closed-loop control of thrust and propellant mixture ratio 

® Engine start and shutdown sequencing 

D Engine-ready monitoring . 

e Engine 1 imit detection. ; • ■ 

0 On-board checkout ■ . ‘ 

© Vehicle/engine interfaces for (1) receiving electrical power and memory 
data words, and (2) transmission of engine status, performance, and 
maintenance data. 


The MEC provides continuously variable thrust betv/een the Minimum Power Level 
(MPL) and the Emergency Power Level (EPL) - 50% and 109% of nominal , respectively - 
as commanded by the vehicle. The thrust control loop contains control logic 
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to receive thrust level commands from the Orbiter General Purpose Computers (6PC) 
through the Engine Interface Unit (EIU). The pneumatic control assembly is then 
directed by the MEC to position the fuel preburner oxidizer valve and oxidizer 
preburner oxidizer valve to achieve the commanded thrust as indicated by the main 
combustion chamber combustion pressure measurements (Ref. 26 ). 

Figure 4.7-40 depicts the MPS and ET, showing the separation disconnects as 
well as the ground servicing interface and the ET pressurization subsystems. 

Figure 4,7-41 illustrates the MPS and ET Helium subsystem which is utilized for 
MPS and ET pressurization and the propellant feed system. A more detailed 
illustration of the plumbing, valves, hydraulic and pneumatic control subsystem, 
and pressurant subsystem for one typical engine is shown in Figure 4.7-'i2. 

Figure 4.7-43 is a sketch of the basic MPS and ET configuration, Figures -4.7-44 
and 4.7-45 illustrate the basic onboard displays and controls for the subsystems, 
which provide the crew interface to the subsystems via the avionics interface 
(Ref. 20 ). 

MPS/ET Simulation Module Description and Performance Parameters 

The MPS and ET simulation module will provide the capability to simulate the 
MPS and ET and their separation interface throughout the nominal operating ranges 
of the subsystem, as well as reflecting the influence resulting from other systems 
and subsystems. (An example of the subsystems’ interaction and influence is that 
of the propellant monitoring subsystem interface' with the subsystems effecting 
the propellant usage.) The propellant monitoring subsystem, in conjunction with 
the MEC, controls the flow rates and mixture ratio of propel Tants to the engines 
to deliver the commanded thrust and maintain efficient combustion, while at the 
same time maintaining the ratio of propellants remaining in the tanks within the 
proper range. ’ .• 

The fuel and oxidizer volumes will be dynamically simulated for all missions 
with the associated sensors, control valves, and associated components. The 
simulation module capabilities will encompass the nominal operational limits, .the 
blueline and redline limits, and the subsystem design limits. The dynamics of the 
propellant monitoring and control subsystem are also influenced by the burn mixture 
ratios of the three engines, the flow rates, initial fill quantities, topping; 
characteristics, and the relief characteristics of the fuel and oxidizer valves, 
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as well as the burn characteristics of the engines within their design profile 
boxes and the associated valves, and plumbing configurations for the specific test 
conditions. Body bending and fuel slosh effects (simulated in the vehicle 
dynamics module) will be incorporated as appropriate into the MPS/ET simulation 
module. 

The performance parameters associated with each subsystem are located on each 

* - ^ ~ -t 

illustration and listed iii Tables 4.7-10 and ^.7-11. The performance parameters 
are located on only one engine in detail and are representative of all three. 

Table 4.7-11 reflects the onboard software parameters. These parameters are 
transmitted via the engine PCM system and recorded on the maintenance recorder 
as well as routed to the G&N computer and downlinked via the digital downlink. 
Reference 21 was used as the prime source for the information in the tables,.- 
This system has a high proportion of "critical" performance parameters due to its 
short operating time, and the critical nature of its functions to vehicle/crew 
survival and mission success. Figure 4.7-46 depicts the MPS/ET simulation module 
interfaces with other systems simulation modules. 

MPS/ET Reference Data Sources and Data Formats 

Reference data from an external source must be generated to verify the 
MPS/ET simulation module. The specific verification conditions determine th^ 
level of reference data fidelity required. This secticn describes two reference 
data sources which can be used as reference modu-les. The first reference module 
presented is a high-fidelity simulation of the MPS/ET. The second is a lower 
fidelity representation which provides less detailed reference data. Both models 
have applications in simulation verification. 

MPS/ET High-Fidelity Reference Module - Reference 24 describes a very detailed 

SSME math mod^l developed by Rocketdyne and designated as the RLOOOOl model. 

This digital model is .provided for use as a baseline standard to verify other- 

SSME simulation models in the regions of start, throtting, and cutoff operations. 

Both extended limits and off-nominal operating conditions for the SSME system are 

simulated. Also modeled in this simulation are SSME turbopump, valve, and v 

propellant feed line dynamics along with MEC functions, I 

A 
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TABLE 4.7-10 MPS/ET MODULE PARAMETERS 


PARAMETER NOMENCLATURE 

DATA RANGE 

TYPE® 

.OU 

HIGH 

UNIT 

FMERG SHUTDOWN INHIBIT CMD/RESP^ 


ON 

EVENT 

I/CP*^ 

AC POWER no 1 ON CMD /RESP 


ON 

EVENT 

I/CP 

HEATER POWER ON CMD /RESP 


ON 

EVENT 

I/P 

CONTROLLER TEMP 

-200 

-f400 

DEG F 

P 

LHP PREVALVE OPEN CMD /RESP 


ON 

EVENT 

I/CP 

LHP PREVALVE CLOSE Cf^D/RESP 


ON 

EVENT 

I/CP 

L02 PREVALVE OPEN CMD /RESP 


ON 

EVEfIT 

I/CP 

LOP PREVALVE CLOSE CMD- /RESP 


ON 

EVENT 

I/CP 

HELIUM BOHLE TEMP 

- 65 

•fSOO 

DEG F 

CP 

HE ISLN VLV 1 OPEN CMD /RESP 


ON 

EVENT 

I/P 

HE ISLN VLV 2 OPEN CMD /RESP 


ON 

EVENT 

I/P 

MPS-LH2 INBD FILL VALVE OPEN CMD /RESP 


ON 

EVENT 

I/CP 

MPS-LH2 INBD FILL VALVE CLOSE CMD /RESP 


ON 

EVENT 

I/CP 

:>PS-LH2 OliTBn FILL VALVE OPEN CMD/RESP 


ON 

EVENT 

I/CP 

HPS-LH2 OUTBD FILL VALVE CLOSE CMD/RESP 


ON 

EVENT 

I/CP 

f*PS-LH2 RECIRC DI'SC VLV OPEN CMD/RESP 

ON 

OFF 

EVENT 

I/CP 

MPS-LH? RECIRC DISC VLV CLOSED CMD/RESP 

ON 

OFF 

EVENT 

I/CP 

MPS-LH2 RECIRC DISC VLV OPEN CMD/RESP - 


ON 

EVENT 

I/CP 

MPS-LH2 RECIPC DISC VLV CLOSE CMD/RESP 


ON 

EVENT 

I/CP 

HPS-LH2 FEED DISC VLV OPEN CMD/RESP 


ON 

EVENT 

I/CP 

f:PS-LH2 FEED DISC VLV CLOSE CMD/RESP 


ON 

EVENT 

I/CP 

MPS-LH2 FLOW RATE 



LB/SEC- 

P 

f’PS-LH2 MANIF REPRES flO 1 OPEN CMD/RESP 


ON 

EVENT 

I/P 

MPS-LH2 MA?!IF REPRES MO 2 OPEN CfiD/RESP 


ON 

EVENT 

I/P 

fTS-LH2 FDLM RELIEF SOL CLOSE CMD/RESP 


ON 

EVENT 

I/P 

f’PS-LH2 TOPPING VLV OPEN CMD/RESP 


ON 

EVENT 

I/P • 

MPS-LH2 QUANTITY 



LB 

P 

MPS-GH?. DISCONNECT PRESSURE 

0 

1000 

PSIA 

CP 

MPS-GH2 PRESS DISC VLV OPEN CMD/RESP 


ON 

EVENT 

I/CP 

MPS-GH2 PRESS DISC VLV CLOSE CMD/RESP 


ON 

EVENT 

I/CP 

MPS-L02 INBOARD FILL VLV OPEN CMD/RESP 


ON 

EVENT 

I/CP 
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TABLE 4.7-10 (CONTINUED) , 27 January 1975 


PARAF'FTFP MOfTMT! ATIIPF 

DATA RANGE 

TYPE® 


LOW 

HIGH 

UNIT 

"PS-LO?. INBOARD FILL VLV CLOSE Cf1D/RESP 


ON 

EVENT 

I/CP 

•‘■'PS-L02 OUTBD FILL VLV CLOSE CMD/RESP 


ON 

EVENT 

I/CP 

rpS-L02 ULnBD FILL VLV OPEN CMD/RESP 


ON 

EVENT 

I/CP 

:?S-Ln? FEED DISC VLV OPEN CHD/RESP 


ON 

EVENT 

I/CP 

rPS-L02 FEED DISC VLV CLOSE CMD/RESP 


ON 

EVENT 

I/CP 

f'PS-LO? FLOW RATE 



LB/SEC 

p 

f'PS-L02 rWlIF REPRES NO 1 OPEN CMD/RESP 


ON 

EVENT 

I/CP- 

N'PS-L02 MANIF REPRES NO 2 OPEN CMD/RESP 


ON 

EVENT 

I/CP 

MPS-L02 FDLM RELIEF SOL CLOSE CMD/RESP 


ON 

EVENT 

I/CP 

MPS-L02 QUANTITY 



LB 

p 

^'PS-GOX DISCONNECT PRESSURE 

0 

moo 

PS I A 

CP 

MPS-G02 PRESS DISC VLV CLOSE CHD/RESP 


ON 

EVENT 

I/CP 

MPS-G02 PRESS DISC VLV OPEN CMD/RESP 


ON 

EVENT 

I/CP 

MRS- PNEUMATIC VLV- HE SUPPLY PRESS 

0 

5000 

PSIA 

CP 

^^PS- PNEUMATIC VLV HE BOTTLE TEMP 

-65 

+500 

DEG F 

CP 

f'PS-PNEU VLV HE RGLTR OUTLET PRESS 

0 

1000 

PSIA 

CP 

MPS-PNEIJ VLV HE IS.LN MO 1 OPEN CMD/RESP 


ON 

EVENT 

I/p 

MPS-PNEU VLV HE ISLN NO 2 OPEN Cf’D/RESP 


ON 

EVENT 

I/p 

MPS-PNEU CROSSOVER NO 1 OPEN CMD/RESP 


ON 

EVENT 

I/P 

MPS-PNEU CROSSOVER NO 2 OPEN CMD/RESP 


ON 

EVENT 

I/p 

MPS-PNEU CROSSOVER NO 3 OPEN CMD/RESP 


ON 

EVENT 

I/p 

MPS-HF SUP BLOWDOWN NO 1 OPEN CMD/RESP 


ON 

EVENT 

I/p 

MPS-HE SUP BLOWDOWN NO 2 OPEN CMD/RESP 


ON 

EVENT 

I/p 

ET-LH2 ULLAGE PRESS NO 1 

0 

50 

PSIA 

p 

FT-LH2 ULLAGE PRESS MO 2 

0 

50 

PSIA 

p 

ET-LH2 ULLAGE PRESS NO 3 • 

0 

• 

50 

PSIA 

p 

ET-LH2 VENT VLV NO 1 CLOSE CMD/RESP 


ON 

EVENT 

I/CP 

FT-LH2 VENT VLV NO 1 OPEN CMD /RESP 


ON 

EVENT 

I/CP 

FT-LH2 VENT VLV NO 2 CLOSE CMD /RESP 


ON 

EVENT 

I/CP 

ET-LH2 VENT VLV NO 2 OPEN CMD /RESP 


OM 

EVENT 

I/CP 

FT-[.nx ULLAGE PRESSURE NO 1 

n 

30 

PSIA 

p 

ET-LOX ULLAGE PRESSURE NO 2 

0 

30 

PSIA 

p 

FT-LOX ullage PRESSURE NO 3 

0 

30 

PSIA 

P- 
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TABLE 4.7-10 (CONTINUED) 


PARAf€TER NOMENCLATURE 

DATA 

RANGE 

TYPE^ 

LON 

HIGH 

UNIT 

ET-LOX VENT VLV NO 1 CLOSE CMD /RESP 


m 

EVENT 

I/CP 

ET-LOX VENT VLV NO 1 OPEN CMD /RESP 


■■ 

EVENT 

I/CP 

ET-LOX VENT VLV MO 2 CLOSE CMD /RESP 


ON 

EVENT 

I/CP 

ET-LOX VENT VLV MO 2 OPEN CMD /RESP 


ON 

EVENT 

I/CP 

MPS-MANUAL THROTTLE ENABLED CMD/RESP 


ON 

EVENT 

I/CP 

HPS-flANL'AL THROTTLE POSITION 

50 

109 

h 

I 

r’PS CHAMBER PRESSURE 



PSIA 

P 

?*PS THRUST 



LB 

CP 


^ P - PERFORHANCE PAPJ\METER 

CP - CRITICAL PERFORMANCE 
PARAMETER 


I - INPUT 

^ INDICATES 2 PARAMETERS (COMMAND. AND RESPONSE) 
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TABLE 4.7-n MPS/ET ON BOARD PROCESSED PARAMETERS 


nn^A^^rT^^ MAHrf!r'i ATtinr 

DATA l?Af'GE 

r/u\nr *h 1 bl\ Nl M'lLriLLn ! UKh 

LOW 

HIGH 

UNIT 

F4ILIIRE IDENT DATA WORD-6 
TEST DATA WORD 6 DATA WORD- 7 
THRUST DW-5 

[:CC PRESS DW-D-lO-n-12 
OX TR PRESURNT PRESS DW-64-65 
HPFTP SHAFT SPEED DU-43 
HP FTP niSCH PRES DW19 THRU- 22 
LPFTP DISCH PRESS DU36 THRlJ-39 
HPOTP SHAFT SPEED DW-B7 
HPOTP DISCH TEf’iP DW-54 
HPOTP DISCH PRESS DW23 THRU-26 
HPOTP TURBO DISCH TEHP DW-5D 
HPOTP INTMD SL PGE PRES DW-75 
LPOTP DISCH PRES DU48 THRU-51 
ENGINE STATUS DW-3 


' 


LH2 INLET PRESS 

0 

200 

PS I A 

LH2 INLET TEMP 

-430 

-379 

DEG F 

LH2 PRE VALVE OPEN 

ON 

OFF 

EVENT 

LOX INLET PRESS 

■■ 0 

+400 

PSIA 

LOX INLET TEMP 

-320 

-270 

DEG F 

LOX PRE VALVE OPEN 

ON 

OFF 

EVENT 

HELIUM SUPPLY PRESS 

0 

5000 

PSIA 

HE FGLTR OUTLET PRESS 

0 

1000 

PSIA 

’^PS-LH2 INBOARD FILL VLV CLOSED 

OH 

OFF 

E'VEIiT 

MPS-LH2 OIITBD FILL VLV CLOSED 

ON 

OFF 

EVENT 

MPS-LH2 TANK DISC VLV OPEN 

ON 

OFF 

EVENT 

.'TS-LH2 FEED DISC VLV OPEN 

ON 

OFF 

EVENT 

MPS-LH2 FNG MANIFOLD PRESSURE 

0 

200 

PSIA 

MPS-LH2 TOPPING VLV CLOSED 

ON 

OFF 

EVENT 

HPS-LOX INBD FILL VLV CLOSED 

ON 

OFF 

EVENT 

MPS-LOX QUTBD FILL VLV CLOSED 

ON 

OFF 

EVENT 

MPS-LOX TANK PRESS DISC VLV OPEN 
LPFTP DISCH TEMP DW-40 

OM 

OFF 

EVENT 


4*7-114 


mtOZ»€>rifFt/iEri.iL oo(i/iC5i./«s /tn.s'^TSTe&m/isjTreGs c<f’W2iR^ruv •> 



TABLE 4. 7-n (CONTINUED) 


MDC £1136 
27 January 1975 


PARAMETER NOMENCLATURE 

MPS-LOX FEED DISC VLV OPEN 
??S~LOX ENGINE MANIFOLD PRESSURE 
MPS-LOX FEEDLIME RELIEF SOV CLOSED 
MPS-LOX LOW LEVEL LIQUID SNSR NO 1 
MPS-LOX LOW LEVEL LIQUID SNSR NO 2 
MPS-LOX LOW LEVEL LIQUID SNSR NO 3 
MPS-LOX LOW LEVEL LlOUin SNSR MO 4 
ET-LH2 LOW LEVEL LIO SENSOR NO 1 
ET-LH2 LOW LEVEL LIQ SENSOR MO 2 
ET-LH2 LOW LEVEL LIQ SENSOR NO 3 
ET-LH2 LOW LEVEL LIQ SENSOR NO 4 


PERFORMANCE PARAMETER 
CRITICAL PERFORMANCE PARAMETER 


DATA RANGE 
LOW ! HIGH 1 UNI' 


EVENT 


0 400 


EVENT 
EVENT 

urr I nov I 
:::t ' | event 

WET DRY EVENT 



EVENT 
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FIGURE 4.7-46 MPS/ET SIMULATION MODULE INTERFACES 
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Figure 4.7-48 depicts an "intra-module" functional flow diagram for the major 
subroutines as well as the primary component process elements used in each of the 
major subroutines. The main program calls all computational subroutines Snd 
controls the model input/output. The subroutine names and their functions 'are 
listed in Table ^.7-12. Reference 24 provides a program listing and the user 
information source. 

Complete simulation of the MPS/ET with this digital model requires that the 
ET and helium supply functions be incorporated. These modifications would consist 
primarily of simple mass decrements from launch conditions based upon fuel and 
oxidizer flowrates computed in the RLOOOOl model. Helium supply for the pneumatic 
control assembly would be similarly decremented. 

MPS/ET Lovj-Fidelity Reference Modules - Figure 4,7-49 (Ref. 25 ) describes a 
reference module which would provide low-detailed reference data. This level of 
fidelity and detail would be adequate for special simulation module verification 
phases. For example, it would be useful in integrating other simulation verifi- 
cation modules needing only its particular (functional) outputs. It might also 
be suitable for use with procedures simulators. The lower detailed module would 
be capable of generating reference data needed to verify corresponding simulation 
module output in a quick-look verification mode. 

Inputs to this reference module consist of; 

# throtting commands from guidance 

© engine gimbal commands from the Thrust Vector Control System (TVCS) 

• nominal vacuum thrust per engine 
© atmospheric pressure 

© nozzle exit area 
© number of engines operating 
e oxidizer/fuel mixture ratio 

The outputs of this module include: 

e the forces and moments acting on the Shuttle from the MPS 
® amounts of fuel /oxidizer remaining 

© amounts of fuel /oxidizer expended . 

e fuel mass flow rate 
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TABLE 4.7-12. SSME DIGITAL MODEL SUBROUTINES 


SUBROUTINE 

FUNCTIONS 

CNTR0L 

Simulaties digital controller and hydraulic actuation of engine 
control valves 

DISPL 

Generates CRT displays of computed output 

EPR0P 

Computes error between ideal gas behavior and real hydrogen 
property map 

FGEN 

General purpose function generator 

FL0W 

Computes incompressible fluid flow dynamics 

FUELF 

Computes fuel feed system flow and pressure dynamics 

GFL0W 

Computes isentropic gas flow for choked and unchoked orifices 

H0TGAS 

Computes engine hot gas pressure and flow dynamics 

HTF 

Computes hot gas side heat transfer coefficient 

H2DFPE 

Computes hydrogen density as a function of pressure and 
enthalpy 

H26AMMA . 

. Computes - hj/dTogen specific heat ratio as a function of pressure 
and temperature ‘ 

I6N 

Simulates ignition system transients 

0XIDF 

Computes oxidizer feed system flow and pressure dynamics 

PR0P 

Computes hydrogen pressure and temperature as a function of 
density and internal energy 

TRBTRQ 

Simulates hot gas turbine dynamics 

DISPL2 

Generates CRT displays of computed output 
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FIGURE 4.7-49. MPS/ET REFERENCE MODULE FLOW DIAGRAM 
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VARIABLE 

FUNCTION 

TYPE^ 


• 

Main engines mass flov/ rate (slugs/sec) 

0 

Mang 


Internal constant (=1/3 of MODE / 1; = 1/2 if MODE = 1} 


Po. 


Ambient pressure (psf) 

I 

THc 


Throttle command 

I 

"Pme 


Main engine thrust (lbs) 


cn,)j 


Main engine thrust for engine i(lbs) 


T 

‘ vryNS 


Main engine vacuum thrust (lbs) 

DATA 

TX^ 

TY- 

Jij 


Total thrust forces on body axes (lbs) 

0 

TXTRIM ) 
TYTRIA\( 

tetrim) 

. 

Total trim thurst forces acting on body (lbs) 



Main engine fuel flow (Ibs/sec) 

I 

ycGi 

YCG 

> 

C.G. position in Orbiter data reference plane (ft) 

I 

XE&' 

YEB 

2EB 


Position -of engine gimbals with respect to C.G, in 
body axes (ft) 


YG;' 

ZG,- 

' 

Gimbal position of engine i in Orbiter data reference 
planes (ft) 

DATA 

PCTF . 

Percent main engine fuel remaining 

0 

PCTOX 

Percent main engine oxidizer remaining 

0 

At 


Subroutine internal integration internal (sec) 

I 

SP; 


Pitch gimbal angle of engine i with respect to null (rad) 

I 

SPBi 


Pitch gimbal angle of engine i with respect to body 
axis (rad) 


5PT 

i 

Pitch gimbal trim angle of engine i with respect to body 
axis (rad) 


^ex\t 

2 

Main engine nozzle exit area (ft ) 

I 

(Pmelejcp 

Main engine fuel expended (lbs) 

0 

(PtiTie.)'rem 

Main engine fuel remaining (lbs) 

I 

(F 1 

TYVa.i o 

Main engine fuel onboard at time = 0 (lbs) 

I 

Fs 


Main engine fuel onboard at launch (lbs) 

I 


FIGURE 4.7-49’. (CONTINUED) 
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VARIABLE 


FUNCTION 


TYPE' 


(0'/)g^y,p 

(ox)„ 

OXs 

fFXBj; 

(FVBjii 



rYBll?] 

(FZB>TRrM>,-i 


0 

/ 


Is, 


MODE 


(AAXtV.'i 

(MYE)ii 


^My)t 


(m) 

(MZ)t 

SPTRiM; 


5YB-, 


S \TRIM; 


-e-Pi 

-O-TRIK 


Main engine oxidizer expended (lbs) 

Main engine oxidizer remaining (lbs) 

Main engine oxidizer onboard at time = 0 (lbs) 

Main engine oxidizer onboard at launch (lbs) 


Main engine thrust forces on body axes for engine i (lbs) 


Main engine trim thrust forces on body axes for 
engine i (lbs) 


gravitational acceleration (ft/sec‘^) 

Main engine number 

= 1-upper; = 2-lower left; = 3-lower right 
Specific impulse 

Ratio of number of main engines on to total 
Main engine operating mode 
= 1-all operating 
= 2-upper engine failed 
= 3-left engine failed 
= 4-right engine failed 


Moments about body axes due to engine i (ft/lbs) 


Total engine moments on body axes (ft/lbs) 


Pitch gimbal trim angle of engine i with respect 
to null ^''^ad) 


yaw gimbal angle of engine i with respect to null (rad) 


yaw gimbal angle of engine i with respect to body 
axis (rad) 


Yaw gimbal trim angle of engine i with respect to 
null (rad) 


Pitch null angle of engine i with respect to body 
axis (rad) 


Pitch angle of trim thrust vector with respect to 
body axes (rad ) 


0 

0 

I 

I 


I. 


DATA 

0 


• FIGURE 4.7-49. (CONTINUED) 
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“I - Input 
0 - Output 

DATA - Data resident in program 


FIGURE 4.7-49. (CONTINUED) 
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e trim thrust vector angles with respect to body axes 

In developing this model it was assmed that throttling commands are generated 
by guidance (no manual throttle capability), no engine internal dynamics are 
simulated (instantaneous throttle response), and no internal SSME subsystems 
simulation (plumbing and valve dynamics, turbopump dynamics, internal thermo- 
dynamics). Thrust is decayed instantaneously at SSME cutoff. 

MPS/ET Validation Methods and Check Cases 

Complete simulation module verification requires exercising the MPS/ET 
simulation software through the extremes of the various subsystem inputs to verify 
proper response to the influencing subsystem stimuli. Comparison of the reference 
module response to that of the simulation module will determine simulation module 
validity. Actual verification will be performed in an off-line or batch test mode 
using special check cases. 

Check case design will incorporate functions to exercise the simulation and 
reference modules throughout the Minimum Power Level (MPL), the Nominal Power 
Level (NPL), and the Emergency Power Level (EPL). The level of detail employed 
in the reference module and the specific verification conditions will determine 
the type of check case used. 

High-Fidelity Check Cases - High-fidelity, dynamic verification of the simulation 
module requires check cases which evaluate the MPS/ET simulation module in the 
regions of start, throttling, and engine cutoff operations. Through each of these 
regions , performance parameters for each subsystem would be output and compared with 
the reference module results. Subsystem transient behavior and steady-state 
values must be checked. Comparisons would be made using plot output similar to the 
Figure 4.7-50 description of the SSME high-pressure fuel turbine torque 
characteristics. This cbtailed plot represents internal SSME functions. Automated 
techniques, discussed in Section 5.3, can also be used in evaluating the check case 
results. 


Low- Fidelity Check Cases - Low-level check cases, employed with the corresponding 
reference module, may also be required. Check cases composed of static conditions 
would be used. For example, discrete throttling levels evaluated with respect to 
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^ FT2 “ function (in-lbs); high pressure fuel turbine 

FT2S = fraction of pressure ratio available for fuel turbine power 
(dimensionless) 

Ppj = main fuel injector pressure 

Ppp = fuel preburner pressure ' 

1ft 2 “ pressure fuel turbine speed parameter 

FIGURE 4.7-flO. HIGH-PRESSURE FUEL TURBINE TORQUE CHARACTERISTICS 
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thrust and consumables usage (fuel and oxidizer) would be needed to check simulation 
module outputs to Vehicle Dynamics and Mass Properties modules. 

MPS/ET Data Base Impact 

Data base requirements for verification of the MPS/ET simulation module 
consist of the reference module(s), the reference module generated data, check 
cases, and various service routines as necessary. A high-fidelity module 
verification will require a complex reference module and corresponding check 
cases. Impact upon the verification data base will increase in accordance with 
reference module complexity. 
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4. 7. 3. 2 Reaction Control Subsystem (RCS) 

RCS Description 

The RCS provides maneuvering capabilities for the Orbiter during Insertion, 
On-orbit, and Entry phases. The RCS provides additional capabilities for attitude 
changes and small translational accelerations. 

As defined in Reference 20 , the RCS is composed of one forward and two aft 
RCS modules. The forward module consists of tv;o thruster clusters, a left side 
and a right side cluster. Each cluster contains eight main thrusters and three 
vernier thrusters. The fuel and oxidizer propellant tankage is shared by the two 
clusters. The aft RCS consists of two modules, a left and a right module. Each 
aft module is independent, consisting of twelve main thrusters, fuel and oxidizer 
tanks with separate propellant pressurant systems and the associated plumbing 
and components. However, the fuel and oxidizer sources for each aft RCS module 
can be inter-shared, as v/ell as with the sources for each of the two QMS pods and 
the QMS payload bay kit (when carried for extended mission capabilities). 

Figure 4.7-51 (from Reference 20 ) depicts the plumbing and thruster system 
of a typical forward RCS module indicating the cluster grouping. A typical aft 
RCS module is depicted in Figure 4,7-52 , including the OMS and other aft RCS 
module interconnects. Figure a. 7-53 provides a more comprehensive indication!^ of 
the propellant sharing capability by the valves and interconnects between the aft 
RCS modules, the OMS pods, and the OMS payload bay kit forming the auxiliary 
propulsion subsystem. 

RCS Simulation Module Description and Performance Parameters 

The RCS simulation module provides the capability to simulate the RCS through- 
out the design operating ranges of the subsystem and interfacing systems. 

An example of the subsystems interaction and influence is that of the pro- 
pellant sybsystem interface with the crossover plumbing subsystem to provide 
crossfeed or sharing of propellant sources between the appropriate auxiliary pro- 
pulsion subsystems. Each individual propellant source will be simulated for a 
defined mission or mission phase. These capabilities will encompass the subsystems 
nominal operational limits, the blueline and redline limits, and the design limits 
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FIGURE 4.7-52 RCS 



MDC Ell 36 
27 January 1975 









Jisi/z! “• sc»iJt,nrrr‘JO£3JLS'^ S't/'mnoa insf^iVGCjaeAJ 



MDC Ell 3 6 
27 January 1975 












me Ell 36 
27 January 1975 

to simulate the proper response and capability of the RCS simulation module. The 
dynamics of the propellant sources usage are also influenced by the propellant 
pressurant sources, pressurant depletion rates, pressurant fill pressures, temp- 
erature, and volume, the propellant flow rates, the propellant initial fill 
quantities, the insertion accuracy, QMS usage, and the plumbing and associated 
valve configuration for the normal and crossfeed lines for the specific simulated 
condi tions . 

RCS thruster firing signals interface with the avionics module with inputs 
initiated by automated systems and hand controllers. The RCS simulation module 
interfaces with other simulation modules are depicted in Figure 4,7-54 . Tables 
4,7-13 and 4.7-14 list the performance parameters for the respective forward and 
aft RCS modules, in the RCS simulation module (Ref. 21 ). 

RCS Reference Data Sources and Data Formats 

Figure 4.7-55 (Ref. 27 ) describes a subroutine, RCSENG, from the SVDS 
simulation/analysis program (Ref. 28 ). RCSENG can be combined with a driver to 
form a reference module which would serve as an adequate data source for RCS 
verification reference data. 

RCSENG computes the thrust of up to 35 user specified RCS jets on the Orbiter. 
Hardware on and off thruster firing delays are simulated using an "equivalent square 
wave" technique. Within the integration interval. in which the thrust is acting, 
this square wave is averaged to produce a constant thrust over the entire interval 
with' the total impulse remaining unchanged. A jet status table enables simulation 
of manual on-off control and jet system failures (Ref. 27 ). RCS forces and 
torques in Orbiter body axis coordinates are computed-both individually (each jet) 
and collectively (summed). 

'RCSENG inputs consist of (Ref. 28 ); 

0 Number and location of RCS jets simulated 
© RCS thrust vectors (directions and magnitudes) 

© Turn on-off time delays 

0 RCS jet minimum electrical on-time j 

© Manual on-off jet control flag. 

4.7-1.34 

n/scDonJiv£L.L. saouGt-As c&miP'Amv' 


MDC Ell 36 
27 January 1975 



FIGURE 4.7-54 RCS SIMULATION MODULE INTERFACES 
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PARAMETER NOMENCLATURE 


TYPF^ 

LOW 


1 UNIT 

1 1 r C- 

Helium Oxidizer Tank Pressure 

0 

+5000 

PSIA 

CP 

Helium Fuel Tank Pressure 

0 

+5000 

IPSIA 

CP 

Helium Oxidizer Purge Valve No. 1 CMD/RESP 

• 

CLOSE 

EVENT 

I/pb 

Helium Oxidizer Purge Valve No. 2 CMD/RESP 


CLOSE 

(EVENT ■ 

1 . 

I/P‘ 

Helium Fuel Purge Valve No. 1. CMD/RESP 


CLOSE 

1 EVENT 

I/P 

Helium Fuel Purge Valve No. 2 CMD/RESP 

i 

CLOSE 

EVENT 

I/P- 

Helium Oxidizer Regulator Isolation VI v. 1 CMD/RESP 


OPEN 

EVENT 

I/P 1 

! 1 

Helium Oxidizer Regulator Isolation VI v. 2 CMD/RESP 


OPEN 

[event 

1 

I/P 

Helium Oxidizer Regulator Isolation Vlv. 3 CMD/RESP 


OPEN 

lEVENT 

I/P 

Helium Fuel Relief Isolation Valve-A CMD/RESP 

j 

i 

OPEN 

EVENT 

I/P 

Helium Fuel Relief Isolation Valve-B CMD/RESP 

j 

OPEN 

EVENT 

I/P 

Helium Oxidizer Relief Isolation Valve-A CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Oxidizer Relief Isolation Valve-B CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Oxidizer Purge Manual Isln. Vlv. 1 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Oxidizer Purge Manual Isln. Vlv. 2 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Fuel Purge Manual Isolation Vlv. 1 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Fuel Purge Manual Isolation Vlv. 2 CMD/RESP 


CLOSE 

EVENT 

I/P 

Oxidizer Thruster Isolation Valve-E CMD/RESP 


OPEN 

EVENT 

I/CP 

Oxidizer Thruster Isolation Valve-F CMD/RESP 


OPEN 

EVENT 

j 

I/CP 

Fuel Thruster Isolation Valve-E CMD/RESP 


OPEN 

EVENT ; 

1 

I/CP 

Fuel Thruster Isolation Valve-F CMD/RESP 


OPEN 

EVENT 

I/CP 

Oxidizer Thruster Isolation Valve-A CMD/RESP 


OPEN 

EVENT 

I/CP 

Oxidizer Thruster Isolation Valve-B CMD/RESP 


OPEN 

EVENT 

I/CP 

Oxidizer Thruster Isolation Valve-C CMD/RESP 


OPEN 

EVENT 1 

I/CP 

Oxidizer Thruster Isolation Valve-D CMD/RESP 


OPEN 

EVENT 

I/CP 

Fuel Thruster Isolation Valve-A CMD/RESP 


OPEN 

EVENT 

I/CP 

Fuel Thruster Isolation Valve-B CMD/RESP 


OPEN ; 

EVENT 

I/CP 

Fuel Thruster Isolation Valve-C CMD/RESP 


OPEN 

EVENT 

I /CP 

Fuel Thruster Isolation Valve-D CMD/RESP 


OPEN 

EVENT 

I/CP 

Sump Fuel Heater Primary CMD/RESP 


ON 

EVENT 

I/p 

Sump Oxidizer Heater Primary CMD/RESP' 


ON 

EVENT 

I/P 

Storage Fuel Heater Primary CMD/RESP- 


ON 

EVENT 

I/'o 

Storage Oxidizer Heater Primary CMD/RESP 


ON 

EVENT 

I/p 
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TABLE 4.7-13 (CONTINUED) 


PARAMETER NOMENCLATURE 

0/! 

L.0W 

n'A RANG 
HIGH 

5E 

UNIT 

TYPE® 

Helium Fuel Regulator Isolation Valve No. 1 CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Fuel Regulator Isolation Valve No. 2 CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Fuel Regulator Isolation Valve No. 3 CMD/RESP 


OPEN 

EVENT 

I/P 

Thruster Injector Temperature No. 1 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 3 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 5 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 7 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 9 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 11 

0 

+500 

BEG F 

CP 

Thruster Injector Temperature No. 13 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 15 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 101 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 103 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 105 

0 

+500 

DEG F 

CP 

Thruster Chamber Pressure-1 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-3 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-5 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-7 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-9 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-11 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-13 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-15 

0 

+200 

PSIA 

CP 

Oxidizer Storage Tank Shell Temperature 

-50 

+300 

DEG F 

p 

Oxidizer Sump Tank Shell Temperature 

-50 

+300 

DEG F 

p 

Fuel Storage Tank Shell Temperature 

-50 

+300 

DEG F 

p 

Fuel Sump Tank Shell Temperature 

-50 

+300 

DEG F 

p 

Fuel Regulator Outlet Pressure 

0 

+300 

PSIA 

CP 

Fuel Propellant Manifold Pressure 

0 

+300 

PSIA 

CP 

Oxidizer Regulator Outlet Pressure 

0 

+300 

PSIA 

CP 

Oxidizer Propellant Manifold Pressure 

0 

+300 

PSIA 

c? 

Fuel Manifold Temperature No. 1 

-50 

+300 

DEG F 

p 

i 

Fuel Manifold Temperature No. 2 

-50 

+300 

DEG F 

0 
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PARAMETER NOMENCLATURE 

DATA -RANGE 

TYPE® 


HIGH 

■ UN1T_ 

Oxidizer Manifold Temperature No. 1 

-50 

+300 

DEG F 

P 

Oxidizer Manifold Temperature No. 2 

-50 

+300 

DEG F 

P 

Helium Oxidizer Tank Temperature No. 1 

-50 

+300 

DEG F 

P 

Helium Oxidizer Tank Temperature No. 2 

-50 

+300 

DEG F 

P 

Helium Fuel Tank Temperature No. 1 

-50 

+300 

DEG F 

P 

Helium Fuel Tank Temperature No. 2 

-50 

+300 

DEG F 

P 

Sump Oxidizer Heater Secondary CMD/RESP 


ON 

EVENT 

I/P 

Storage Fuel Heater Secondary CMD/RESP 


ON 

EVENT 

I/P 

Storage Oxidizer Heater Secondary CMD/RESP 


ON 

EVENT 

I/P 

Vernier Thruster Heaters ON CMD/RESP 


ON 

EVENT 

I/P 

Thruster Heaters A ON CMD/RESP- 


ON 

EVENT 

I/P 

Thruster Heaters B ON CMD/RESP* 


ON 

EVENT 

I/P 

Thruster Heaters C ON CMD/RESP 


ON 

EVENT 

I/P 

Thruster Heaters D ON CMD/RESP 


ON 

EVENT 

I/P 

Sump Fuel Heater Secondary CMD/RESP 


ON 

EVENT 

I/P 

Thruster Chamber Pressure-101 

0 

+200 

PSIA 

CP 

Thruster Cfiamber Pressure-103 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-105 

0 

+200 

PSIA 

CP 


^ P - Performance Parameter 
CP - Critical Performance Parameter 
I - Input 


^ indicates 2 parameters (command and response) 


REPRODUCIBILITY OP THE 
ORIQ!NAL PAGE IS POOP 
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TABLE 4.7-14 RCS hODULE AFT PARAMETERS 


~ 

PARAMETER NOMENCLATURE 

DATA RANGE 

TYPE^ 

LOW 

HIGH 

UNIT 

Helium Oxidizer Relief Isolation VI v. No. 1 CMD/RESP^ 


OPEN 

EVENT 

I/P*^ 

Helium Oxidizer Relief Isolation VI v. No. 2 Cf1D/RESP 


OPEN 

EVENT 

I/P 

Helium Fuel Relief Isolation Valve No. 1 CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Fuel Relief Isolation Valve No. 2 CMD/RESP 


OPEN 

EVENT 

I/P- 

Helium Oxidizer Manual Purge Isolation Vlv.l CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Oxidizer Manual Purge Isolation Vlv. 2 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Fuel Manual Purge Isolation Vlv. 1 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Fuel Manual Purge Isolation Vlv. 2 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Fuel Regulator Isolation Valve 1 CMD/RESP 


OPEN 

EVENT 

J/P 

Helium Fuel Regulator Isolation Valve 2 CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Fuel Regulator Isolation Valve 3 CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Oxidizer Regulator Isolation Vlv. 1 CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Oxidizer Regulator Isolation Vlv. 2 CMD/RESP 


OPEN 

EVENT 

I/P 

Helium Oxidizer Regulator Isolation Vlv. 3 CMD/RESP 


OPEN 

EVENT 

I/P 

Oxidizer Thruster Isolation Valve-A CMD/RESP 


OPEN 

EVENT 

I/CP 

Oxidizer Thruster Isolation Valve-B CMD/RESP 


OPEN 

EVENT 

I/CP- 

Oxidizer Thruster Isolation Valve-C CMD/RESP 


OPEN 

EVENT 

I/CP 

Oxidizer Thruster Isolation Valve-D CMD/RESP 


OPEN 

EVENT 

I/CP 

Fuel Thruster Isolation Valve-A CMD/RFSP 


OPEN 

EVENT 

I/CP 

Fuel Thruster Isolation Valve-B CMD/RESP 


OPEN 

EVENT 

I/CP 

Fuel Thruster Isolation Valve-C CMD/RESP 


OPEN 

EVENT 

I/CP 

Fuel Thruster Isolation Valve-D CMD/RESP 


OPEN 

EVENT 

I/CP 

Oxidizer Regulator Outlet Pressure 

0 

+300 

PSIA 

CP 

Oxidizer Propellant Manifold Pressure 

0 

+300 

PS I A 

CP 

Fuel Regulator Outlet Pressure 

0 

+300 

PSIA 

CP 

Fuel Propellant Manifold Pressure 

0 

+300 

PSIA 

CP 

Oxidizer Manifold Temperature 

-50 

+300 

OEG F 

p 

Fuel Manifold Temperature 

-50 

+300 

DEG F 

p 

Thruster Chamber Pressure-17 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-19 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-21 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-23 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-25 

0 

+200 

PSIA' 

CP 

Thruster Chamber Pressiire-27 

0 

+200 

PSIA 
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PARAMETER NOMENCLATURE 

DAI 

'A RANGE 

TYPE® 

nsHi 

luisni 

mmm 

Thruster Chamber Pressure-29 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-31 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-33 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-35 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-37 

0 

+200 

PSIA 

CP 

Thruster Chamber Pressure-39 

0 

+200 

PSIA 

CP 

Helium Oxidizer Tank Temperature 

-50 

+300 

DEG F 

I 

Helium Fuel Tank Temperature 

-50 

+300 

DEG F 

I 

Thruster Injector Temperature No. 17 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 19 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 21 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 23 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 25 

0 

+500 

DEG F 

CP 

Thruster Injector- Temperature No. 27 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature flo. 29 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 31 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature Mo. 33 

0 

+500 

DEG F 

CP 

Helium Oxidizer Tank Pressure 

0 

+5000 

PSIA 

CP , 

Helium Fuel Tank Pressure 

0 

+5000 

PSIA 

CP 

Helium Oxidizer Purge Valve No. 1 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Oxidizer Purge Valve No. 2 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Fuel Purge Valve No. 1 CMD/RESP 


CLOSE 

EVENT 

I/P 

Helium Fuel Purge Valve No. 2 CMD/RESP 


CLOSE 

EVENT 

I/P 

Fuel Heater Secondary CMD/RESP 


ON 

EVEtiT 

I/P-. 

Oxidizer Heater Secondary CMD/RESP 


ON 

EVENT 

I/P 

Thruster Injector Temperature No. 35 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 37 

0 

+500 

DEG F 

CP 

Thruster Injector Temperature No. 39 

0 

+500 

DEG F 

CP 

Oxidizer Tank Shell Temperature 

-50 

+300 

DEG F 

p 

Fuel Tank Shell Temperature 

-50 

+300 

DEG F 

p 

Fuel Heater Primary CMD/RESP 

i 

ON 

EVENT 

I/p 

Oxidizer Heater Primary CMD/RESP 


ON 

EVENT 

I/p 


3 . b 

P - Performance Parameter indicates 2 parameters 

CP “ Critical Perfonaance Parameter (command and response) 

I " Input 
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COMT. PG 2 

f.e i. - jif. ...14 


• Vehicle index ere coaputed and the nue^er of RCS jete le es" 
a temporary location. 


• If it le the program Initlalixatlon (JTESTll) control pro^ 
ceudg ea followat 


• Vehicle dependent Index la computed. 


• ECS Jet parameter la for all Jete of all vciilclea are xeroed. 


e Inltiallratlon flag le eet to one. 


a However t£ JTES1>1 the eforcstincloned computatlona are 
bypaesed. 

• Vehicle Index computed. 


FIGURE 4.7-55. RCSENG SUBROUTINE FLOW CHART 
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• The electrical tine variable la cocpuced and Jet atatua table 
Incerrogaciun counter la act to «ero. 


XJC0m)-0 

• If the Jet aiacua table la not uaed (1FM.C0»0) the next teat 
la performed on the atatua of the apeclflc vehicle table, 
odierulae control la advanced to the jet etatuB for nuruial 
on^'clf jet cbutrol compatationa. 


• If Che Inputs are nade to Jet etacua tables (IFLGOO) then 
control la advanced to cotupute jet on and off times for 
open loop a tearing, utheruiee cofitrol cotulnuea. 


• If the control frequency cotsputaclon Interval lo leas than 
or equal to sero (dt^^) , RCSENG ie exit and control la re- 
Corned to main program, otherul&e control Is advanced to 
xerolhg the total body corquao and forces. 


• Hie jet status for oianual on-off Jet control is computed If 
the SUM of Che epproprlete Jet status table value and the 
tolerance on current time is lees Uisn the current time (t_), 
otherwise control is rucumed back to the test of the Jet ^ 
status input flag. 


• Indices used to locate proper ECS Jet status flag is computed. 


FIGURE 4.7-55. (CONTINUED) 
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• k ceMt ciaJc on lh« indcs value to M*«ttc • w«Iuh t» 

Input In Uie jut MtaLua table tliui wae eprcUlfd l>y IfLUl, 
If no value lu ptcoenc caitroi i»dvar\cea to ftn error 
print out, othcrulae control continued. 


• The ACS Jet scntua flag lb aec equal to the appropriate 
value of the uimual on-off concrul of the RCS Jet* 

• The subaccipt for the Jet otatua table La aet equal Lo the 
fluhacrlpc. for the Jet status table whldt latUciitea the rtext 
locution plus one. 

If Che difference in (ha monuiil ou-o£f control of the HCS 
Jet Sful the tolerance on current ciae is lees than or equal 
Co curraaC tiuie (c^,) then control is advanced to the update 

of the Jet araCus table Indun end recycled buck Co the co4s- 
pututloii of the RCS Jet iudtcbs, ochetvlBe logic flow 
concinuuu. 


• If Che ich value of the manual on-off controls la greater 
Chan or equal to Che ICh plus o{ie value plus Uie coleraace 
on curreiic clue (hen the Jc( s(alua flag ia set Co zero 
(IFALGC»0) IndlcuCing no Inputo were made to the table for 
chac vehicle. If (he Cast is false tUo Joe status table 
Index is updated and concrul recycled back to (he test of 
chu jet Bcatua input flag. 


!“ 


corn. ON fO 4 


P0..3 QE- li 


FIGURE A.7-55. (CONTINUi.D) 



%■ 

-K.: 


MDC E1136 
2.7 January 1 975 



XSW3I - SOft^nvr-JOiSULS^ SV'ISf'nOC} ~S~7SIfV!VOCIO‘!^V 


1 


y fl3"^ 

^^irflLCCrOl 

I &g TO no ~> t>^ 



• lit&eirogaclon couACer i» advoncod by one. 

• The Jec acatue table Index la updated by one. 


« A test is made to deceriiinc 1£ the Jet acatuu c^le hue been 
Interrogated fifty tliaci. If the fifty pastios are made then 
^sn error message io prihted which states that itie "jet status 
Lnble" flag (IlLOC) was input ao one ond no values were input 
to the jec status cable, conciol la then returned to teat cite 
next table flag. If IJCOUtI Ja less Chan fifty Interrogaiion 
logic Is recycled. 


• If open loop cmtcrol Is being used (C(UlrKQfp) logic continues, 
othttcwlss control advance to the zeroing of the RCS force end 
moment. 


• Vehicle data index is conpuced. 


CONT. ON PO 5 


CXUl— HC JX 


FIGURE 4.7-55'. (CONTINUED) 
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m It • A^v«n J«t f«Ll la UTKAlL^O) , thten ih« alccirlCAl oa 
Clue C^Q^) «quftl CO chtt i.-ucrcnc tinu (c^>* and lli« 

eXeccrlcal off tiae «quol to electrical tine 

vorlablej ^ 


E * t 
*^0l'F *^NX 


or if jet la not failed (JTFAIL»1), then E . and E are 
aeroed. 



• The cioB at whldi the control ayacea or Jet atatua cable waa 
evaluated la equal to current time. 


4p-‘c 


• Vehicle data Index la computed. 

• Vehicle RCS forcea and mosenca are ceroed. 



CONI. ON PG 6 


PG 5 QF 14 


FIGURE 4.7-55 (CONTINUED) 
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• vehicle data Index it competed. 


I£ Che time at which the thrust goes 
Chao chc current time logic advuccaa to the test o£ c^p, 
otherwise logic flow continues. 


The time at which the thrust goes on the time at 

which the thrust goes off equal to the aqusre 

wave on and off times which were saved from the previous 
'evaluation of the routine, In ttie event that the jet was 


issued an electrical on signal before or c 


occurred. Tlie previous tltoeu are then 


Chen; 


?£?oed. 


■JOFF 


had 


If t lu leas than the current tine (t ) the logic uhlch 
computes Che square wave on find off is bypassed (mennlng no 
electrical on and off algiujlc have been issued) and control 
lo transferred to the coauutntlon of the thruat. otherwise 
logic cuntlnues. 


If the electrical off signal (EQiy) than oc equal to 

the current time, it is assumed that no electrical signal has 
been issued for the Jet and chc square uav'e logic la bypassed, 
however, if Che teat is false logic flow continues. 


If the save value of Che electrical off Cbae plus the 

tolerance on current tliae (fpp) is less than the electrical 
on tlaie control Is transferred to the computation of cbt 

next portion of the squire wave. If the test la false, logic 
flow continues. 


CONT. ON P& 7 


PD 6 Of Li- 
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FIGURE 4.7-55. (CONTINUED) 
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• If Che pasc value of the ci.£&« at which the chruae goea off 
(c^pp) la lees than or equal to che preaenc value (c..,.p) Che 
logic flow contliiuea, otherwiac control ia advanced to the 
calculation of C^pp. 


e If tjQpp la greater than eero then It Is updated by; 


Coacrol is cheu advanced to Che calculation o£ 


'toff “ *^C **' ^OFF ” 

Control is then advanced to the calculation of £' 


The past cU« at which the thrust cuu off (^Qpp) updired 
as; 


Control ia then advanced to the calculation of E^pp* 


CONF. ON fO 


f ft, 7 o r 14 


FIGURE 4.7-5f). (CONTINUED) 
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• If tj___ Ib greaccr then current time, the new **Hquure wave" 
on nAd^off clD*ea ciuat be aolvcd because ^jqfP adJ-t t*?" 
qulred In computing the current thrust, otuervlue control ts 
CranoforreU to the calculation of and ^jQpp> 


• Thu new "square wive*' Cines are Cooiputed. 

- E^, + flto 


JON 


t* 

OFF 


ON 


ON 


H Che thruac on Clue (t._) ia leas than paec value of the 
tUraat off time (^jQpp) c&iicrol la udviuiced Co the calculation 
of If the cast Is false then lo updated. 


^OFF “ "^'oFF ^ 


Conceal iB then advanced to the calculation of 


• The chru&t ott and off times are computed foe the new "square" 
wave" with engine time delays. 

‘^JON ’ ‘^ON 

'jOFF ” ^OFF " '''off 

• If the thrust on time tUan the thrust off else 

(C-pp) Chen control lu advanced to the culculaClon of 

-.otne^lse CjQpp. is recomputed as 

'jOFF “ 'jOFF * ''StIN 


COnT. oh pc 3 


eO.B_ QE U . 
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0 
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• lh» past value of Che eXectrical cue off tlee le 

CDupuced. 

C* mV 

OFF OFF 


• If ttif control frequency step «ize it> lesa ttian or equal to 
, zero (open loop eCecrlng option) » control ie advanced to by** 
puue computing the thrust on the "equare wave," otheruLsa 
control continues. 


• If the Jet fall fUg la leas than zero again cotitrol bypasses 
computing chu thrust baaed on the square wave, if the flag 
la equal to zero (Jet failed) the overage thrust la set equal 
to the thrust uujgnlcude, if the Jet does not fall (flag 
greater than zero) then the average rhruot Is set to zero* 



• If Che control systea i« to be evaluaced at Che next Inte- 
graclon step (the test is false) the electrical off tl^nc is 
sec equal to current cice; 



and the logic advances to the coapucsCion of the RCS forces 
and torques. Likewise if the teat is tnte control elao 
sdvances to chs coiaputatlon of RCS forces and torques. 
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« The Average chruai: la aec e^uaL to the thruac i&agnicud'e, 

T - T 
AVC MAG 

• If the control ayeceu la to be evaluated at the next inCe- 
grnClon step (teat la false), the puet value of the electrlcdl 
off time is act equal to the current else plus 


E* ■■ t 
OIF *'hx 

If Che ccHC la true and after the preceding operation concrol 
la advonced to the calculation of the KCS force and torquea. 

• Entry Into this point of logic dcnoceii that there la no jet 
fail and the following logic ccuputea the equore wave to denote 
Che thrust Interval* 


• If the Jet on tlue is greater than or equal to current tine 
plus then the average thrust Is teroed; 


T 

AVG 


0.0 


and control Is advanced to further test to decemina square 
wave configuration, however. If Che test la true, logic 
flow continues* 


• If the let on else is greater Chan or equal to Che current 
ClDie logic flow is advanced to the teat of Jet off cIbc vlch 
^i'X* logic flow conciiiuea. 


CC/U. OK PC 11 


fG I Q Of 
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• If the chruec off tto;e is greater chan or equal to the curreat 
time plus then average chruac Is set equal to the thrust 

(RQgnitudei ' ' 


T ■* T 
* • AVC KAO 

and from here logic flow la advanced Co further Ceet to de- 
cenDine cite square wave cunf IguraCion* Howeveri If Che test 
lb true, logic flow continues. 


a If die thrust off cltae Is less ilian or equal to Che current 
time the average chi'ust la sec equal to zero; 


TAVC * 0.0 

and Che control is advanced co further test to deCarmlne die 
square wave configuration. However, If the test Is true the 
averugu chruac is sec equal to; 

then Che flcu edvunces Co further test co deceraclne the 
equate wave configuratf on. 


tour. ON PO 12 


ej> j.L_Qr_ 


Ll_ 
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If the Jat off clioe la lesa than the current tioe plus 
the average lUrusc le defined asi 


'''AVG " (^‘jOFF “ )^HAG 


otliervioe Che average chruat la defined as; 


^VG ■ (‘^x ■ ■'m 


Ac this polnc further tests are node to detcrnlna Che square 
wave configuration. 


• If the chruat on time is less than the current cli&e or greater 
than or equal to current tioe plus At., then proceed to cooi- 
pute the forceu. Otherwise, the logic continues. 


If the thrust off tine is less than the current tine plus At^ 
then the average thrust is redefined aot 


■^VO ■ \VG * (<‘iFP - 
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< DO 301 1 J=t .3 > 


lVJ=IVfJ 

lOfiQJK lVJ) = TOROJri IVJI^t 




COtir. DM PC 14 

PC 13 gp 14 


- t> M 


ORQJIJI 


• If ch« previous Cesc lo true tlien die average rhrust la 
*AVG * ^AVG ■*' ^HAC 


a At thla point the cotspuceil ctiruoc Is uoed to calculate the 
forces and moaieuCu for each Jac and suia overall jeca. 

• If the average chruac 'iy xero the RCS Jec logic la recycled, 
if It itf doc then the logic flow continues. 


• Veliide depcadeuc index co locace data In the RCSAHC array 
la coapuced. 

• The force due to a particular Jet la coaputed froa the 
average chruac and the direction coslnea betuecn the RCS jete 
chruac vector and the vehicle'e BCS uxce. 


Cor each Jet 


• The torque due the RCS Jet la computed aa: 
/ 



The total torque is then 
- _ 

“ H M. for Jet 1 
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30 5 

? 

1 CONTINUE 1 


Th« tol«i force per ve^tlcie ie Uieu 
Hjr 
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Ilie RCS logic la recycjej until all Jcti art avaluated. 
CoucroL la recurned to lha aaln program. 


RETURN 


GmI 


LEGEND: 


RCSENG CGMHON VAfllAQLE OESCRIPTION TABLE 


CODE 

HATH 

USE 

OlHENSION 

CaHHON ARRAY 

OEFINITICN OF VARIABLE 

CONFRC 

A+r 

U 

1 

DAPl < 

11 

RCS /T VC DAP CONTROL SYSTEM MODEL 
COHPUTATIOfl INTERVAL (SEC) 

DELTR 

U 

1 

GNOATK 

2t 

ROTATIONAL INTEGRATION STEP SIZE ISECl 

DTMIN 


U 

25 

RJOATU 

2521 

RCS JET HINIHUM ELECTRICAL ON TIME 
ONCE THE ELECTRICAL ON SIGNAL HAS BEEN 







ACT IVATED ISECl 

OTOFF 


U 

25 

RJOATH 

2271 

TIME DELAY IN TURNING OFF EACH RCS JET 
AflER THE ELECTRICAL OFF SIGNAL HAS BEEN 
ISSUED (SECl 

OTON 


U 

25 

ftJOATlI 

2021 

time delay in turning ON EACH RCS JET 
AFTER THE ELECTRICAL ON SIGNAL HAS BEEN 
ISSUED ISECl 

EOFF 

^OFF 

c/u 

25 

RJOATK 

2781 

TIME AT WHICH RCS JET ELECTRICAL ON 
SIGNAL IS TO 86 TURNED OFF (SECl 

EON 

EToh 

c/u 

25 

BJOATH 

3031 

TIME AT WHICH RCS JET ELECTRICAL ON 
SIGNAI IS TURNED ON (SEC) 

EPP 

£ 

u 


RJOAT2I 

20bl 

TOLERANCE ON CURRENT TIME FDR EVALUATION 


PP 





or JET STATUS TABLE (SEC) 

FBJt 

Ptt 

c/u 

3 

RJDATII 

3281 

TOTAL THRUST FORCE FROM ALL JETS IN 


JT 





VEHICLE DCS (LBS) 

FJUS 


c/u 

5a51 

RJ0AT2J 

21 

JET STATUS TABLE 

JFALGC 


c/u 


RJOAI2J 

11 

JF: STATUS TABLE FLAG 

=0 JEf STATUS TABLE IS NOT USED' 

=1 JET STATUS TABLE IS USED 

IFLGC 


u 

L 

RJDATU 

2771 

JFT STATUS TABLE FLAG 

•0 VALUES ARE NOT INPUT TO JET STATUS 







TABLE FOR VEHICLE CONSIDERED 







«1 values are INPUT TO JET STATUS TABLE 







FOR VEHICLE CONSIDERED 

JSSV 


c/u 


RJDAT^J 

2071 

INDEX FOR JET STATUS TABLE WHICH 
INDICATES NEXT LOCATION TO BE USED 
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CODE 

HAIM 

use 

DIMENSION 

COMMON 

ARRAY 

DEFINITION OF VARIABLE 

NRCS 

I 

i 

u 

1 

DAPl ( 

351 

INTEGER NUMBER OF TVC SAMPLE PERIOD 
intervals CYCLED FOR EACH RCS ROLL 
CONTROL LOOP CYCLED 

PEDFF 

^OFF 

C/U 

25 

RJOATII 

3311 

SAVED VALUE OF EOFF FROM PREVIOUS CONTROL 
SYSTEM EVALUATION ISECI 

RCSANC 

fttS)(,my.<CS^U 

3 ,'25 

RJDATK 

771 

DIRECTION COSINES OF THRUST VECTOR 
OF THE RCS JET 

RCSLOC 


u 

3,25 

RJOATU 

21 

VRCS LOCATION OF THE RCS JETS IFTI 

TIMEC 


u 


GNDAT2I 

1B3I 

CURRENT TRAJECTORY TIME (SEC) 

THEP 


c/u 

1 

RJOATU 

356) 

LATEST TRAJECTORY TIME IHAT THE RCS DAP 
CONTROL SYSTEM WAS EVALUATED (SEC) 

THC 

Tmh& 

u 

25 

RJOATU 

1771 

THRUST MAGNITUDE OF EACH RCS JET ILBSI 

TDRQJT 


c/u 

a 

RJOATU 

3571 

Total moment about vehicle cc in vehicle 

BCS iFT-mSI 

JTEST 

JX 

LMAX 


c/u 

u 

u 


RJ0AT2I 

GNOAT2I 

GNDAT2I 

208) 

1691 

17AI 

RCS ENGINE MOUFL IN I T 1 AL 17 AT 1 ON FLAG 
=0 INITIALIZATION PASS OF RCS ENGINE 
MODEL 

*I EXECUTE RCS ENGINE HOUEL LOGIC 
1 INITIALIZATION QOHPIETEO) 
INTERNAL VEHICLE NUMBER 
MAXIMUM LENGTH OF VEHICLE COMMON 

NJT 


u 

1 

RJOATU 

11 

NUMBER OF RCS JETS BEING SIMULATED 


RCSENG INTERNAL VARIABLE DESCRIPTION TABLE 


CODE MATH 


DEFINITION OF VARIABLE 


IJCOUN 

IV 

JSS 

JTFAIL 


•**-4 ■ 

N 


^ o 

TJOFF 



TJQFFS 

*roFF 

SP 

TJON 

‘^oH 

H a ■ 

TJONS 

'*’oM 

»-H h3 
CO ^ 

TNEXT 


O 

. TORQJ 

Pi 




W W 







BCS COHPONENTS OF THE FORCE VECTOR PRODUCED BV A SINGLE 
RCS JET. ILBSI 
INTERNAL COUNTER. 

VEHICLE INDEX. 

SUBSCRIPT FDR THE JET STATUS TABLE. 

RCS JET STATUS FLAG. 

«0 NO MANUAL :CDHHAND TO JET. 

=l JET COMMANDED vTN. 

•2 JET COMMANDED OFF. 

NUMBER OF JETS. 

TIME AT WHICH JET IS ACTUALLV TURNED OFF. ISECI 

SAVED VALUE OF TJOFF IN THE EVENT THAT EON IS ISSUED BEFORE 

TJOFF OCCURS. (SEC) 

TIME AT WHICH RCS JET IS ACTUALLV TURNED OH. ISECI 
SAVED VALUE OF TJON IN THE EVENT THAT EON IS ISSUED BEFORE 
TJOFF OCCURS. ISECI 

TEMPORARY VARIABLE EOUIVALENT TO CURRENT TINE PLUS THE 
ROTATIONAL INTEGRATION STEP SIZE. ISECI 

BCS COMPONENTS OF THE TORQUE VECTOR PRODUCED BV A SINGLE 
RCS JET. IFT-LBSI 
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Outputs of RCSENG are the individual and summed RCS thrust forces and torques 
on the Orbiter. RCS mass properties information is not computed in RCSENG. 

A driver must be constructed to ensure a complete RCS reference module. In 
addition to providing input/output simulation module compatibility, the RCS 
reference module driver must provide accurate simulation of: (1) fuel and oxidizer 

mass consumed during RCS activation (including turn on-off losses) and (2) RCS/OMS 
propellant sharing interface functions. These calculation and logic sequences 
should not be difficult to implement. 

RCS Validation Methods and Check Cases 

Check cases for RCS simulation module verification should consist of static 
and dynamic command sequences to exercise both the simulation and reference modules. 

In the static check cases, each RCS jet could be fired and its effects on 
Orbiter body axis forces and moments analyzed. Individual jet thrust and consumables 
usage can be similarly evaluated. Static firing check cases for groups of RCS jets 
should be developed to check collective jet performance. 

Dynamic check cases would be composed of integrated jet firing command 
sequences which simulate actual Orbiter maneuvers or manual and automatic control 
systems. Dynamic maneuvers include: •• - 

c Orbiter/ET separation 
e Docking/payload handling 
e Entry attitude control 

Data Base Impact 

RCS Simulation Module verification data base requirements consist of: 

© RC-S reference module 
• Resident reference data and check cases 

« Any additional routines, jet tables, etc. as needed for verification , > 

The reference module, once developed, should not expand significantly; however, 
vehicle design changes involving the placement and thrust of individual and groups 
of RCS jets and various' control system modifications will require the construction 
of additional check cases, ' . 
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■ 4. 7. 3. 3 Orbital Maneuvering System {OMS) 

QMS Description 

The OMS provides maneuvering capabilities for the Orbiter during orbital 
insertion, on-orbit, and de-orbit mission phases. The OMS is contained in two semi- 
independent pods located on the aft portion of the Orbiter. The prime components 
of each OMS pod are the OMS engine, fuel tank, oxidizer tank, propellant pressurant 
system, and the associated plumbing and components. HGV^/ever, the fuel and oxidizer 
sources can be inter-shared between pods, as well as the sources for the aft RCS 
pods. 

Figure 4.7-56 illustrates the propellant sharing capability, by use of mani- 
folding tanks and isolation valves, between the two OMS pods and the aft RCS 
modules. Figures 4.7-57, 4.7-58, and 4.7-59 depict the tankage, engine, optional 
OMS payload bay kit, and respective associated hardware for one OMS pod (Ref. 20.)., 

OMS Simulation Module Description and Performance Parameters 

Simulation of the OMS will utilize a combination of logical, functional, 
and explicit engineering equations to calculate the required parameters. For 
simulation purposes, the OMS module will provide the OMS thrust as well as crew 
displays of fuel, oxidizer, helium, and engine chamber pressure, and for oxidizer 
and fuel quantities (Ref. 11 ). k 

Included in the simulation module will be subsystem simulation and inter- 
action. An example of the subsystems interaction and influence is that of the 
propellant subsystem interface with the pressure subsystem which maintains proper 
propellant flow in a non-gravity environment. The dynamics of the pressurant 
subsystem are also influenced by the depletion, the flow rates, the burn mixture 
ratio , and initial fill quantities of the fuel and oxidizer as v/ell as the burn 
characteristics of the engine within its design profile box and the associated 
valves, and plumbing configurations. - 

Figure 4.7-60 depicts the OMS simulation module interfaces with other simula- 
tion modules. The performance parameters associated with the OMS module are 
described in Table 4.7-15(Ref . ; 21 ). f 
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FIGURE 4.7-58 QMS ENGINE OPERATIONAL INSTRUMENTATION MEASUREMENTS 
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FIGURE 4.7-60,0MS SIMULATION MODULE INTERFACES 
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TABLE '1. 7- 15 QMS MODULE PARAMETER LIST 


PARAMETER NOMENCLATURE 


miRE 2, PROPELLANT SUBSYSTEMS 


Engine Fuel Crossfeed Line Temperature 
Engine Fuel Crossfeed Valve No. 1 Position 
Engine Fuel Crossfeed Valve No. 2 Position 
Engine Fuel Tank Quantity 
Engine Fuel Tank Level Low 
Engine Fuel Tank Temperature - Lower 
Engine Fuel Tank Ullage Pressure 
Engine Fuel Tank Ullage Temperature 
Helium Fuel Isolation Valve Open 
Engine Fuel Tank Relief Isolation Valve Position 
Engine Helium Tank Pressure 
Engine Helium Tank Temperature - Upper 
Engine Helium Fuel Isolation Valve Position 
Vapor Isolation Valve No. 1 Position 
Vapor Isolation Valve No. 2 Position 
Engine Fuel Dump Valve Position 
Engine Fuel Feed/Dump Valve Position 
Engine Oxidizer Inlet Temperature 
(Engine Oxidizer Inlet Pressure 
Engine Oxidizer Isolation Valve Position 
Engine Oxidizer Bi-Propellant Valve Temperature 
Engine Oxidizer Crossfeed Line Temperature 
Engine Oxidizer Crossfeed Valve No. 1 Position 
Engine Oxidizer Crossfeed Valve No. 2 Position 
Engine Oxidizer Tank Quantity 
Engine Oxidizer Tank Level Low 
Engine Oxidizer Tank Temperature - Lower 
Engine Oxidizer Tank Ullage .Pressure 


DATA 

RANG 

: ' 

TYPE^ 

Low 

High 

Unit 

0 

+200 

Deg F 

P 

Close 

Open 

Event 

P 

Close 

Open 

Event 

P 

0 

+100 

PCT 

CP 


Low 

Event 

CP 

0 

+200 

Deg F 

P 

0 

+300 

PSIA 

P 

0 

+200 

Deg F 

P 


On 

Event 

P 

Close 

Open 

Event 

CP 

0 

5000 

PSIA 

CP 

-200 

+200 

Deg F 

P 

Close 

Open 

Event 

P 

Close 

Open 

Event 

P 

Close 

Open 

Event 

P 

Close 

Open 

Event 

CP 

Close 

Open 

Event 

CP 

0 

+200 

Deg F 

CP 

0 

+300 

PSIA 

CP 

Close 

Open 

Event 

CP 

-50 

+50C 

Deg F 

CP 

-65 

+50C 

Deg F 

p 

Close 

Open 

Event 

P 

Close 

Open 

Event 

p 

0 

+10C 

PCT 

CP 


Low 

Event 

CP 

0 

+20C 

Deg F 

p 

0 

+30C 

PSIA 

p 
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TABLE 4.7-1 5 (CONTINUED) 


PARAMETER NOMENCLATURE 

DATA RANG 

E 

TYPE^ 

Low 

High 

Unit 

!i-[GURE'2. PROPELLANT SUBSYSTEMS! (continued) 





Engine Oxidizer Tank Ullage Temperature 

0 

+200 

Deg F 

P 

Helium Oxidizer Isolation Valve Open 


On 

Event 

P 

Engine Oxidizer Tank Relief Isolation Valve Position 

Close 

Open 

Event 

CP 

Engine Helium Oxidizer Isolation Valve Position 

Close 

Open 

Event 

P 

Engine Oxidizer Dump Valve Position 

Close 

Open 

Event 

CP 

Engine Oxidizer Feed/Dump Valve Position 

Close 

Open 

Event 

CP 

FIGURE 3, ENGINEI 





Engine Chamber Pressure 

0 

+200 

PSIA 

CP 

Engine Injector Temperature 

-65 

+500 

Deg F 

CP 

Engine Fuel Inlet Temperature 

0 

+200 

Deg F 

CP 

Engine Fuel Inlet Pressure 

0 

+300 

PSIA 

CP 

Engine Fuel Isolation Valve Position 

Close 

Open 

Event 

CP 

Engine Bi-Propellant Valve 1 -Bank A Position 

Close 

Open 

Event 

P 

Engine Bi-Propellant Valve 2 Bank A Position 

Close 

Open 

Event 

P 

Engine Bi-Propellant Valve 1 Bank B Position 

Close. 

Open 

Event 

P 

Engine Bi-Propellant Valve 2 Bank B Position 

Close 

Open E 

Event 

P 

Engine Bi-Propellant Fuel - Valve Temperature 

-65 

+500 

Deg F 

CP 

Engine Pneumatic Pressure Supply A 

0 

+300 

PSIA 

P 

Engine Pneumatic Pressure Supply B 

0 

+300 

PSIA 

P 

Engine Delta V Thrust Bank A Open 


On 

Event 

P 

Engine Delta V Thrust Bank B Open 


On 

Event 

P 

fFIGURE 4. PAYLOAD BAY KIT| 





Fuel Isolation Valve Position - Auxiliary 

Close 

Open 

Event 

P 

Fuel Transfer Line Temperature Aft Fuselage - Aux. 

0 

+200 

Deg F 

P 

Fuel Tank No. 1 Level Lav/ - Auxiliary 


Low 

Event 

I 

Fuel Tank No. 1 Bulk Temperature - Auxiliary 

0 

+200 

Deg F 

P 

Fuel Tank No. 2 Bulk Temperature - Auxiliary 

0 

+200 

Deg F 

p 

Fuel Tank No* 3 Bulk Temperature - Auxiliary 

0 

+200 

Deg F 

p 

Fuel Tank No. 3 Ullage Temperature - Auxiliary 

0 

+200 

Deg F 

p 
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TABLE 4.7-15 (CONTINUED) 


PARAMETER NOMENCLATURE 

DATA RANGE 

TYPE^ 

Low 

High 

Unit 

pfOilRE 4. PAYLOAD BAY KITl (conti nued) 

Kelium Fuel Isolation Valve Open - Auxiliary 


On 

Event 

CP 

Fuel Tank Isolation Relief Valve Position - Aux. 

Close 

Open 

Ev\./it 

P 

Helium Tank Pressure - Auxiliary 

0 

5000 

PSIA 

CP 

Helium Tank Temperature Upper - Auxiliary 

-200 

+200 

Deg F 

P 

Helium Fuel Isolation Valve Position - Auxiliary 

Close 

Open 

Event 

P 

Helium Oxidizer Isolation Valve Open - Auxiliary 


On 

Event 

P 

Oxidizer Isolation Valve Position - Auxiliary 

Close 

Open 

Event 

P 

Oxidizer Transfer Inlet Temp. Aft Fuselage - Aux. 

0 

+200 

Deg F 

P 

Oxidizer Tank No. 1 Level Low - Auxiliary 


Low 

Event 

I 

Oxidizer Tank No. 1 Bulk Temperature - Auxiliary 

0 

+200 

Deg F 

P 

Oxidizer Tank No. 2 Bulk Temperature - Auxiliary 

0 

+200 

Deg F 

P 

Oxidizer Tank No. 3 Bulk Temperature - Auxiliary 

0 

+200 

Deg F 

P 

Oxidizer Tank No. 3 Ullage Temperature - Auxiliary 

0 

+200 

Deg F 

P 

Oxidizer Tank Isolation Relief Valve Position - Aux. 

Close 

Open 

Event 

P 

Helium Oxidizer Isolation Valve Position - Auxiliary 

Close 

Open 

Event 

CP 

Vapor Isolation Valve No. 1 Position - Auxiliary 

Close 

Open 

Event 

P 

Vapor Isolation Valve No. 2 Position -Auxiliary 

Close 

Open 

Event 

P 


P - Performance Parameter 
CP - Critical Performance Parameter 
. I - Input 


Tag. 

IS PO^ 
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QMS Reference Data Sources and Data Formats 

t 

The Figure 4.7-61 math flow describes the subroutine THR2, from the SSFS 
simulation/analysis program (Ref. 17 ), which can be modified slightly and combined 
with a main program driver to form a reference module capable of generating OMS 
verification reference data. 

THR2 models OMS thrust for a maximum of three equivalent thrust Orbiter OMS 
engine (currently there are only two). The model assumes that each engine is 
independently gimballed and that the engine deflections are input from an OMS 
actuator model. THR2 computes and outputs OMS thrust forces and torques in the 
Orbiter body axis coordinate system. 

The direction of output thrust force, depends upon engine location and 
deflection. Engine locations are initially specified in the Fabrication (F) frame. 
An engine coordinate system (E) and an actuator coordinate .system (A), are also 
defined for each engine. Figure 4.7-62 depicts the, various coordinate system 
relationships used in tHR2. 

Inputs to THR2 consist of: 

© Location of vehicle mass center in body axis system 

I 

0 Fabrication to vehicle body axis transformation matrix 
e Engine actuator locations and mounting -angles 
• Engine thrust and gimbal deflections - 
e Fuel loss per OMS firing 
e Specific impulse 
© Number of OMS engines 

e Thrust command on-off delays and minimum impulse time 

Outputs are the computed OMS forces and toruqes in body axis coordinates 
along with fuel mass consumed. 

To function adequately as a reference data source, THR2 must be modified to 
include calculation of OMS oxidizer consumed. Fuel and oxidizer consumption are 
then output. A main program (driver) should also be incorporated to control arcd 
maintain input/output compatibility with the simulation module. This includes the 
OMS/RCS propellant sharing interface and propellant pressurant calculations. 
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FIGURE 4.7-61 (CONTINUED) 
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FIGURE 4.7-61. (CONTINUED) 
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Attitude matrix to go from the engine 
..CE) frame to the vehicle (V) body frame. ' 






Thrust vector for all the OMS engines. nt 
Force vector of the ith OMS engine. nt 

Torque vector of the it?:. OMS engine. nt-m 

Position of the vehicle's center of meters 


mass CX) in the vehicle (Y) body frame. 


2^ Total fdrce vector nt 

N Total torque vector ^ nt-m 

NE Number of gimbalable engines 

FIGURE 4.7-61. (CONTINUED) 
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FIGURE 4.7-62. THR2 COORDINATE SYSTEMS RELATIONSHIPS 
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QMS Validation Methods and Check Cases 

Check case design for QMS Simulation Module verification should consist of 
closed-loop command sequences to evaluate proper execution sequence and the 
calculated forces, torques, and mass properties information, A brief check case 
example is shown in Table 4.7-16 (Ref. 17 ). In this case, engines 1 and 3 were 
turned on with their engines in the null position. Both engines were then 
commanded to their indicated stops. The corresponding forces and moments are 
given in the figure. Check cases of this type should cover both the static design 
end-points (as shown) and intermediate values. Dynamic sequences should also be 
designed for QMS thrust transient effects analyses. 

QMS Data Base Impact 

Data base impact should be minimal for QMS Simulation Module verification, as 
the reference module and check cases can be simple in design and construction, thus 
reducing the overall QMS verification data base requirements. 
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TABLE 4.7-16. OMS CHECK CASE EXAMPLE 


Engine 

Engines in Null Position 

A 

X 

Engines 1 ^ 3 Commanded to Stops 

Forces 

Torques 

I 

S 

Forces 

Torques 


43244.537 

1927.814 • 

X 

43620.685 

-13549.384 

1 ; 

-4263.431 

20443.561 

Y 

-7354.579 

-34151.602 

Y‘ ,• 

9507.928 

398.718 

Z 

6411.012 

53012.341 


0.0 

0.0 

X 

0.0 

0.0 

2 

0,0 

0.0 

Y 

0.0 

0.0 

» ' 

0.0 

0.0 

Z 

0.0 

0.0 


43244.537 

“1203.340 

X 

43620.685 

14037.903 

3 

4263.431 

20443.561 

Y 

7354.579 

-34151.602 


9507.928 

-3693. 9S1 

Z 

6411.012 

-56336.236 


86489.074 

724.504 

X 

87241.370 

488.519 

TOTALS 

0.0 

; 40887.121 

Y 

0.0 

-68303.203 


19015.856 

-3295,233 

Z 

12822.024 

-3323.896 


i ! 
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4.7. 3.4 Solid Rocket Motors (SRM) 

SRM System Description ' ", 

The SRM represents the engine and propellant portion- of the Solid Rocket 
Boosters (SRB's). One SRM and its associated propellant is contained in each SRB. 
Each SRB contains, in' addition to the SRM subsystem, an avionics subsystem, a 
recovery subsystem, a thrust control (TVC) subsystem, and a structures subsystem. 

In general, solid rocket propulsion depends on 1) the grain composition, 
geometry, and mean temperature at ignition, £) the combustion chamber conditions, 
and 3) the nozzle characteristics. The opain geometry of the SRM propellant 
consists of a truncated cone for the first 75 percent followed by a star in the 
latter 25 percent. The mean grain temperature at ignition and combustion chamber 
are limited under normal operation. The nozzle characteristics are fixed by 
design. Each SRM has the same overall propulsion characteristics; however, minor 
deviations are expected due to variations in initial mean grain temperature and 
grain irregularities. 

SRM Simulation Module Description and Performance Parameters 

The simulation module is based upon the SRM as defined for the SRB's used 
on the Space shuttle vehicle. The SRM $imulation module will utilize tabular data 
and table lookup techniques to calculate the SRM total thrust, the body axis thrust 
forces and moments, the propellant mass, and mass flow rate (Ref. 11 ). 

SRM simulation module interfaces are shown in Figure 4,7-63. Table 4.7-17 
lists the performance parameters associated with the SRM simulation module. These 
parameters were established using the criteria developed in Section 4.1. 

SRM Reference Data Sources and Data Formats 

A reference software module will provide reference data to be used to verify 
the SRM simulation module. Reference modeling is only to a detail necessary to 
provide reference data for normal operation of the SRM (i.e., no failure considera- 
tions are provided and the model does not provide for thrust termination other than 
the nominal burning, .to depletion). By normal operation it is meant that the 
operating status remains within the operational design specifications. 
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FIGURE 4.7-63. SRM SIMULATION MODULE INTERFACES 
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TABLE 4.7-17 SOLID ROCKET MOTOR MODULE PARAMETER LIST 


PARAMETER 

DEFINITION 1 

TYPE® 

DT 

INTEGRATION TIME STEP 

I 

Po ■ 

ATMOSPHERIC PRESSURE 

I 

6P, 5Y 

6P - PITCH GIMBAL ANGLE, 5Y - YAW GIMBAL ANGLE 

I 

Tg 

MEAN GRAIN TEMPERATURE AT IGNITION 

I 

IFM 

INDICATOR FLAG TO SPECIFY TRANSFORMATION OF THRUST INTO 
BODY-AXIS .FORCES AND MOMENTS 

I 

i 

SRM INDICATOR INDEX (SPECIFIES LEFT OR RIGHT SRM) 

I 

M 

MASS OF THE GRAIN (USED INTERNALLY AND UPDATED FOR OUTPUT) 

P 

P T 
^C» ‘c 

Pc - COMBUSTION CHAMBER PRESSURE, Tc - COMBUSTION CHAMBER 
TEMPERATURE 

CP 

♦ 

M 

MASS FLOW RATE 

CP 

FHv 

VACUUM THRUST 

P 

FH 

ALTITUDE THRUST 

CP 

% 

EFFECTIVE EXHAUST AREA 

■ DB 


THE TWO ANGLES THAT DEFINE THE GIMBAL NULL POSITION WRT 
THE BODY AXES (ONE SET FOR EACH SRB) 

DB 

L 

rx, TY, TZ 

THRUST FORCES IN THE TIME INVARIANT BODY AXES 

'CP 

LX, LY, LZ 

THRUST MOMENTS IN THE TIME INVARIANT BODY AXES 

CP 

XG^- ,YG^ ,ZGi 

GIMBAL LOCATION IN THE TIME INVAPJANT BODY AXES SYSTEM 
(ONE SET FOR EACH SRB) 

DB 


a 

P - PERFORMANCE PARAMETER 
CP - CRITICAL PERFORMANCE PARAMETER 
I - INPUT 

OB - DATA BASE INPUT 
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As described in the Figure 4.7-64 math flow, the reference module model 
consists primarily of the reference performance characteristics tabulated as a 
function of grain mass remaining (M) and mean grain temperature at ignition (Tq)« 
Specifically, the combustion chamber pressure, the vacuum thrust, and the mass 
flow rate are stored as functions of M and Tg, and the combustion chamber tempera- 
ture is stored as a function of M. (Chamber temperature is not characteristically 
highly dependent on chamber pressure variations or the initial grain temperaturej 
however, if SRM performance data indicates the contrary, then it should be modeled 
accordingly . ) For each time step during simulated burning, the mass flow rate 
is used to decrement the mass remaining. 

Due to standardization, reference propulsion characteristics are the same for 
both SRM's being simulated, and a single model can represent the propulsion for 
both (separately). In the reference module, the only difference in the left and 
right SRM computations are associated changes in relative geometry (i.e., the 
gimbal location and the gimbal null angles ). These changes are handled by the 
pick-up of the appropriate value through an associated input index (i). 

The propulsion parameters are computed by table interpolations and are in- 
dicated by the functions f-| , f 2 , f 2 > and f^ of Figure 4.7-64 .‘ The total altitude 
thrust is computed by correcting the vacuum thrust for the loss due to atmospheric 
pressure. If desired, the thrust is then resolved into the time invariant body 
axis components with the corresponding thrust moments. 

The indicated operations for resolving the thrust into the body axis tomponents 
are presented as two successive transformations. The inner transformation (fg ) 
represents the resolution of the total thrust (assumed to be along a single lir;? of 
action represented by the first component of a triad axis system) into thrust along 
the gimbal null axes (representing a zero deflection of gimbal actuators). The 
outer transformation (f^ ) represents the transformation of these null axis thrust 
components into thrust components along the time invariant body axes. The two 
functions, fg and fg, are dependent on the appropriate coordinate system definitions 
as well as baseline vehicle characteristics. 

The moment computations indicated are the standard moment equations in terms 
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FIGURE 4.7-64 SRM REFERENCE MODULE MATH FLOW 
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FIGURE 4.7-64 (CONTINUED) 
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of the forces (TX, TY, TZ) and the moment arms (XG, YG, ZG) with the appropriate 
sign convention consistent with a right hand coordinate system defintition. Per= 
formance parameters are then output and a mass update is performed. Additional 
outputs are also made as necessary for simulation module verification. 

SRM Validation Methods and Check Cases 

Validation methods used to verify the simulation module utilize the data 
generated with the reference module for comparison purposes. That is, the refer- 
ence module and simulation module would both be accessed by a driver routine 
supplying check point data and the resulting performance parameters would be output 
and stored for post-processing applicable to the verification task. 

One check point should be established to reproduce the reference sea level 
propulsion characteristics (i.e., M should be initialized to li reference value, Tg 
should be assigned a reference temperature (e.g., 60°F), Pq should be sea level 

atmospheric pressure, and DT as appropriate for the mass integration). (NOTE: that 
when generating propulsion characteristics for the complete SRM action time, the 
sequential check points use the mass (M) as updated in the previous check point.) 

Additional check points should reproduce the propulsion characteristics for 
non-reference initial mean grain temperatures (i.e., Tg?^60°F, but within the 
operational range of 40°F to 90°F). 

The remaining check points should exercise the modules through the full range 
of nominal use. These check points can be generated with off-line digital analysis 
programs and can be representative of realistic states along typical trajectories 
(including the gimbal deflections providing realistic TVC). These cases are 
required to provide verification data for the altitude dependency of the thrust 
and the calculations necessary to compute the thrust related' forces and moments. 

The actual verification can be made by direct comparison of output (plots and 
single case situations) and by the use of the plotting techniques discussed in 
Section 5.3. 

In addition to the check point capability, the reference module is structured 
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so as to be easily driven by data generated in previous simulation runs. This 
provides the capability to verify the simulation for ps^rticular situations suspected 
of inaccuracies. 

SRM Data Base Impact 

The reference module and the associated verification technique as presented 
require certain data to be available for the reference module data base. The 
data base requirements are presented with an indication of the likely source in 
Table 4. 7-1. 3. 

It should be noted that the tabular data represents the expected performance 
characteristics and not the design requirement characteristics. However, the design 
requirements may be used prior to availablility of the SRM reference characteristics. 
In addition, some form of configuration control protection should be employed with 
respect to data base items for the reference module, since it is anticipated that 
changes will occur as the program progresses. 


i 


4.7-180 


MCDO/VIVELL. DOUGLAS AS-TDOlSSAUTtCS COMP/U'UV - EMST 


MDC £1136. ’ 

2 September 1974 


TABLE 4.7-inSRM REFERENCE MODULE DATA BASE REQUIREMENTS 


ITEM DESCRIPTION 

SOURCE 

§• PROPULSION CHARACTERISTICS (Pc, Tp, M, THy) AS 

6 SRM SUBSYSTEM 

APPROPRIATE FOR REDUCTION TO TABULAR FORM 

CONTRACTOR 

e GIMBAL LOCATION {XGi , YG^ , ZG^- ) IN BODY AXES 

9 VEHICLE 


CONTRACTOR 

e ANGLES DEFINING GIMBAL NULL AXES WRT THE BODY 

• VEHICLE 

AXES (0i,Tl)-j) - 

CONTPV\CTOR 

& EFFECTIVE EXHAUST AREA (Ar) 

U VEHICLE 


CONTRACTOR 
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4.7.4 Povjer Generation Subsystems 

This section discusses the Electrical Power Generation and Auxiliary Power 
Generation. 

4. 7. 4.1 Electrical Power Generation 

The Electrical Power Generation (EPG) portion of the Electrical Power System 
includes three ^ 2/^2 cells with associated water cooling loops; and the Power 

Reactant Storage and Distribution subsystem (PRSD). (The battery subsystem has 
been deleted.) The distribution and control of electrical power is accomplished 
by the Avionics Subsystem. 

EPG System Description 

Each of the three fuel cells contains subsystems which provide the following 
functions: 

c Heating and pressure regulation of the H 2 and O 2 . 

• Coolant circulation and control for proper temperature control, 
t H 2 /O 2 circulation to remove product water from the fuel cell. 

Reference 20 provided Figure 4.7-65,3 schematic of the fuel cell interfaces 
with other systems. Figure 4.7-66 (also from Reference 20 )' illustrates the fuel 
cell internal operations and functions, which are discussed below. 

Fuel Cell 

The H 2 and O 2 from the PRSD are passed through pre-heaters (heat exchangers) 
which warm the gases prior to flow through coupled pressure regulators which 
maintain the proper operational gas pressures for purges and normal fuel power^ 
generation. 

The fuel cell coolant loop circulates a cooling fluid through the fuel cell. 
This fluid transfers heat from the fuel cell to the active Thermal Control System. 
The system includes coolant pump, flow control valve, condenser (heat exchanger), 
startup heaters, fuel cell coldplates, O 2 /H 2 pre-heaters (heat exchangers), and 
coolant accumulator. 

The H 2 /O 2 circulation is accomplished by a combination pump/H20 separator. 

The flow is through the fuel cell, condenser, and the water separator. The fuel 
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cell product water is output to the ECLSS for storage and use. 

PRSD 

The Power Reactant Storage and Distribution (PRSD) subsystem comprises 
cryogenic storage tanks, control valves and distribution manifold. The. Shuttle 
subsystem has two tank assemblies for O 2 and two tank assemblies for the H 2 * 
However, provisions of the manifolds allow the addition of cryogenic O 2 and H 2 
tank assemblies in the payload bay. Each tank assembly has two heaters, burst 
diaphragm and relief valve. The subsystem schematic from Reference 20 is shown 
in Figure 4,7-67. 

EPG Module Description and Performance Parameters 

The EPG module functions are to provide the calculations related to the fuel 
cell operations and the PRSD performance. Figure 4.7-68 is an illustration of the 
EPG module functional elements and their interfaces with other modules, The 
functions of each functional element are discussed in the following paragraphs. 

The module performance parameters for the fuel cell and PRSD are identified in 
Tables 4.7-19 and 4.7-2D. 

Fuel Cell Pressure Control - The following calculations are provided by this 
el ement; 

• Electrode pressure - a function of termperature, gas' quantity, gas 
volume. 

9 Gas Usage rates - a function of electrical load, inlet pressure, electrode 
pressure, temperature, purge mode selection, and electrode differential 
pressures. 

© Electrode Gas Quantities - functions of regulator flow characteristics and 
gas usage rates. , . 

e H 2 O quantity - function of electrical load and electrode pressures. 

Fuel Cell Coolant Loop - This element makes the following calculations: 

© Pump flow rate - a function of loop configuration selection, fluid 
temperature, input voltage. 

6 Pump outlet temperature - a function of inlet temperature, flow rate, input 
electrical power, and output hydraulic power. 
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PARAMETER NOMENCLATURE 

1 DATA RANGE 

TYPE^ 
U- 

LOW 

HIGH 

UNIT 

H2 Regulator Pressure 

U 

+100 

PSIA 

CP 

Voltage 

0 

+40 

VDC 

p 

Current 

0 

+500 

AMP DC 

p 

Cell Current Low 

LOW 


EVENT 

p 

Ready 

OFF 

ON 

EVENT 

I 

Start Up Heater 

OFF 

ON 

EVENT 

I 

Startup Heater - OFF 


ON 

EVENT 

I 

Stack Cool Out Temperature 

-50 

+300 

DEG F 

CP 

Condenser Exit Temperature 

0 

+250 

DEG F 

CP 

02 Flow 

0 

25 

LB/HR 

CP . 

02 Regulator Pressure 

0 

+100 

PSIA 

CP 

H2 Flow 

0 

4.5 

LB/HR 

CP 

02 Purge Valve Automatic ‘ 


ON 

EVENT 

I 

H20 Condition 

ON 

OFF 

EVENT 

I 

H20 Outlet Valve Position 

OPEN 

CLOSE 

EVENT 

I 

Product H20 Line Temperature 

0 

+200 

DEG F 

CP 

H20 Line Heater Active 


ON 

EVENT 

I 

H20 Line Heater ON 


ON 

EVENT 

I 

02 Pressure Over H20 

' 

0 

+10 

PSID 

p 

H2 Purge Valve OPEN 


ON 

EVENT 

I- 

H2 Purge Valve - Automatic 


ON 

EVENT 

I 

02 Purge Valve OPEN 


ON 

EVENT 

I 


® P - Performance Parameter 
CP - Critical Performance Parameter 
I - Input 
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TABLE 4.7-20 EPS POWER REACTANT STORAGE AND DISTRIBUTION PARAMETERS 

(COMMON 3 FUEL CELLS) 


PARAMETER NOMENCLATURE 

DATA RANGE j 

TYPE® 

LOW 

HIGH 

UNIT 

H2 Circulation Isolation Valve lA OPEN 

CLOSE 

OPEN 

EVENT 

P 

H2 Circulation Isolation Valve IB OPEN 

CLOSE 

OPEN 

EVENT 

P 

H2 Circulation Pump lA ON 


ON 

EVENT 

P 

H2 Circulation Pump lA Automatic 


ON 

EVENT 

P 

H2 Circulation Pump IB ON 


ON 

EVENT 

P 

H2 Circulation Pump IB Automatic 


ON 

EVENT 

P 

H2 Circulation Line Heater No. lA-Active • 


ON 

EVENT 

P 

H2 Circulation Line Heater No. IB-Active 


ON 

EVENT 

P 

H2 Manifold 1 Pressure 

0 

+400 

PSIA 

CP 

H2 Manifold 1 Isolation Valve Closed 

OPEN 

CLOSE 

EVENT 

P 

H2 Manifold 2 Pressure 

0 

+400 

PSIA 

CP 

H2 Manifold 2 Isolation Valve Closed 

OPEN 

CLOSE 

EVENT 

P 

H2 FCP 1 Supply Valve Closed 

OPEN 

CLOSE 

EVENT 

P 

H2 FCP 2 Supply Valve Closed 

OPEN 

CLOSE 

EVENT 

P 

H2 FCP 3 Supply Valve Closed 

OPEN 

CLOSE 

EVENT 

, P 

H2 Pressure 

0 

+400 

PSIA 

CP 

H2 Quantity 

0 

100 

PONT 

p 

H2 Heater lA ON 

OFF 

ON 

EVENT 

p 

H2 Heater lA Temperature 

-425 

+200 

DEG F 

CP 

H2 Heater IB ON 

OFF 

ON 

EVENT 

p 

H2 Heater IB Temperature 

-425 

+200 

DEG F 

CP 

H2 Purge Vent Temperature , 

0 

+250 

DEG F 

CP 

H2 Relief Vent Heater 1 Active 


ON 

EVENT 

p 

H2 Relief Vent Heater 2 Active 


ON 

EVENT 

p 

H2 Relief Vent Heater 3 Active 


ON 

EVENT 

p 

02 Pressure 

0 

+1500 

PSIA 

CP 

02 Quantity 

0 

100 

PCNT 

■ p 
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TABLE 4.7-20 (CONTINUED) 



DATA RANGE 

TYPE^ 1 
1 

PARAMETER NOMENCLATURE 

LOW 

HIGH 

UNIT 

02 Heater lA ON 

OFF 

1 

ON 

EVENT 

P 1 

02 Heater lA Temperature 

-325 

+300 

DEG F 

CP 

02 Heater IB ON 

OFF 

ON 

EVENT 

P 

02 Heater IB Temperature 

-325 

+300 

DEG F 

CP 

02 Circulation Isolation Valve lA OPEN 

CLOSE 

OPEN 

EVENT 

P 

02 Circulation Isolation Valve IB OPEN 

CLOSE 

OPEN 

EVENT 

P 

02 Circulation Pump lA ON 


ON 

EVENT 

P 

02 Circulation Pump lA Automatic 


ON 

EVENT j 

P 

02 Circulation Pump IB ON 


ON 

EVENT 

p ! 

02 Circulation Pump IB Automatic 


ON 

EVENT 

p 

02 Circulation Line Heater No. lA-Active 


ON 

EVENT 

p 

02 Circulation Line Heater No. IB-Active 


ON 

EVENT 

p 

02 Manifold 1 Pressure 

0 

+1500 

PSIA 

CP 

02 Manifold 1 Isolation Valve Closed 

OPEN 

CLOSE 

EVENT 

P 

02 Manifold 2 Pressure 

0 

+1500 

PSIA 

CP 

02 Manifold 2 Isolation Valve Close 

OPEN 

CLOSE 

EVENT 

p 

FC 1 02 Supply Valve Closed' 

OPEN 

CLOSE 

EVENT 

p 

FC 2 02 Supply Valve Closed 

OPEN 

CLOSE 

EVENT 

p 

FC 3 02 Supply Valve Closed 

OPEN 

CLOSE 

EVENT 

p 

H20 Relief Vent Temperature 

0 

+250 

DEG F 

CP 

FC H20 Relief Vent Heater 1 Active 


ON 

EVENT 

p 

FC H20 Relief Vent Heater 2 Active 


ON 

EVENT 

p 

02 Purge Vent Temperature 

0 

+250 

DEG F 

CP 

02 Relief Vent Heater 1 Active 


ON 

EVENT 

p 

02 Relief Vent Heater 2 Active 


ON 

EVENT 

p 

02 Relief Vent Heater 3 Active 


ON 

EVENT 

p 


^ P - Performance Parameter 
CP - Critical Performance Parameter 

I - Input 
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• Coolant flow to ATCS - a function of condenser H2O/H2 outlet temperature, 
pump flow rate, startup heater inlet temperature, and condenser fluid 
outlet temperature. 

e Fluid temperature to ATCS - a function of pump outlet temperature. 

• Coolant flow to condenser - a function of coolant flow to ATCS, condenser 
H2O/H2 outlet temperature, startup heater inlet temperature, and condenser 
fluid outlet temperature. 

e Condenser fluid inlet temperature - a function of condenser fluid flow 
rate, pump outlet temperature, condenser H2/H2O outlet temperature, ATCS 
fluid flow, and ATCS fluid return temperature. 

0 Condenser fluid outlet temperature - a function of condenser fluid flow, 

H2/H2O flow, H2/H2O -inlet temperature, and condenser fluid inlet temperature. 

• Startup heater inlet temperature - a function of stack inlet control valve 
characteristics, pump fluid outlet temperature, condenser fluid outlet 
temperature, condenser flow rate, and pump flow rate. 

• Startup heater temperature - functions of heater electrical power, inlet 
fluid temperature, and fluid flow rate. 

• Startup heater outlet temperature - a function of fluid flow, heater 
temperature, and inlet fluid temperature. 

e Fuel cell outlet temperature - a function of the fuel cell temperature, 
pump flow rate, and startup heater outlet temperature. k 

• O2 Pre-heater fluid outlet temperature.- a function of inlet fluid 
temperature, inlet O2 temperature, O2 flow rate, pump flow rate. 

f O2 Pre-heater outlet O2 temperature - a function of inlet Og temperature, 
inlet fluid temperature, and O2 and fluid flow rates. 

• H2 Pre-heater outlet fluid temperature - a function of O2 pre-heater fluid 
outlet temperature, H2 inlet temperature, H2 flow rate, and fluid flow 
rate. 

c H2 Pre-heater outlet H2 temperature - a function of O2 Pre-heater fluid 
outlet temperature, H2 inlet temperature, H2 flow rate, and fluid flow rate. 

• Fuel cell temperature - a function of .electrical load, end plate heater 
power, O2/H2 flow rates, cool ant. .flow rate, H2/H2O flow rate, coolant inlet 
temperature, and H2/H2O inlet temperature. 

i ■ 

H2/H2O Circulation - This element calculates the following: 

• H2/H2O pump flow - a function of electrical input voltage, H2/H2O temperature, 
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rpm, and outputpower. 

0 Separator H2O flow - a function of separator efficiency and H2O quantity 
inlet. 

e Separator H2O pressure - a function of H2O tank pressure, and H2O flow. 

© Separator outlet H2O temperature - a function of inlet H2/H2O temperature, 
input electrical power, and output hydraulic power, 
e H2 pump outlet temperature - a function of the inlet H2/H2O temperature, 
input electrical power, and output hydraulic power. 

G H2 pump outlet pressure - a function of H2 temperature, and pump flow 
rate. 

e Condenser inlet H2/H2O temperature - a function of inlet H2 temperature, 
inlet H2 flow, H2/H2O pump flow, fuel cell outlet H2/H2O temperature, and 
H2/H2O pressure. 

Fuel Cell Electrical Output - This element generates the following: 

e Output voltage level - a function of reactant quantities at electrodes, 
output current, and fuel cell temperature, 
e Output current - a function of load impedance, and fuel cell output 
voltage. 

PRSD - The calculations performed by this element are: 

0 Reactant Quantities - functions of ECLSS usage, fuel cell usage, and 
relief venting. 

• Tank temperatures - functions of input heater power, heat leakage, 
reactant flow rates, and pressures. 

© Tank pressures - functions of reactant quantities, temperatures, and 
volumes. 

e Burst diaphragm rupture (discrete) - a function of diaphragm characteristics 
and pressure. 

© Relief flow rate - a function of tank pressure, ambient pressure, reactant 
temperature, and relief valve characteristics (only after burst diaphragm 
rupture). 

e Manifold temperature - a function of inlet and outlet flow rates, and ^ 
temperatures . \ 

e Manifold pressure - a function of inlet flow, outlet flow, and manifold 
temperature. 
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© Manifold flov; rates - functions of inlet pressure, inlet tc- j.erature, 
and outlet pressure. 

EPG Reference Data Sources and Data Formats 

Several sources of data exist for use for developing reference modules or 
making direct comparison with simulator results. The system and component design 
performance requirements , analysis/performance predictions, test results, and 
flight performance data are a few. Figure 4.7-69 is an overview flow chart of 
methods of using these sources in a direct comparison with the results of a 
simulator run. In brief, the method is to establish the design requirement, 
analysis, etc. as input conditions on the simulation module to be verified. The 
simulation module is allowed to reach a stabilized response and the resulting data 
output for manual comparison with the spec requirements, analysis results, etc. 

This method is discussed in Section 4. 2. 1.4. The method of section 5.1 can be > 
:Useti’with the reference models for verification. 

Fuel Cell 

The fuel cell requirements are provided by Reference 30 . The requirements, 
analysis and predictions can be' determined from Reference 31 , design or analysis 
groups, and MPAD, Many of the test results can be acquired from individual 
acceptance tests and integrated-systems checkout. Reference 29 discusses a 
computer program for simulation of the CSM fuel cells for th'e Skylab mission. 

The Shuttle fuel cell system is very similar to the one described by this 
reference; thus, the subject program should be easily converted for Shuttle 
simulation verification. 

PRSD - The basic flow for the PRSD O 2 reference module is shown in Figure 4.7-70 . 
This approach utilizes the basic flow charts shown in Figures 4.7-71 and 4.7-72 . 

The approach for PRSD-H 2 parameters would be identical to the O 2 except for the 
fluid characteristics. Reference 32 can be used as a source of O 2 characteristics 
while Reference 33 provides the H 2 characteristics. Reference 31 provides many 
of the component characteristics of interest. 


EPG Validation Methods and Check Cases 

The reference module is utilized by the method of Section 5-1, v/hile the 
systems performance data is used by the technique of Section 4.2 is validating the 
EPG simulation module. Drivers required to generate and maintain interfacing 
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FIGURE 4.7-70 . PRSD REFERENCE MODULE OVERALL MATH FLOW 
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module input parameters include: 

• Atmosphere Revitalization 
e Active Thermal Control 
B Avionics (Electrical Power distribution) 
e H 2 O Management 
e Control Logic Inputs 

The check cases should include minimum, intermediate, and maximum electrical 
power load requirements , transient power switching loads, and projected mission 
load profiles. 

EPG Data Base Impact 

The impact of the EPG validation on the simulator data base is in four forms. 
These forms are the reference module, required drivers, processing subroutines, 
and data files. The most significant impact is the reference module. The 
reference module includes the fuel cell and the power reactants systems. The 
drivers would have the next most significant impact. The drivers would be required 
for both the reference module method and the systems performance data method. 

The processing- subroutines would include the data output routines (tables, 
plots, etc.) and any comparisons or data manipulations. The output routines would 
be required for the reference module and the systems performance data methods. 

Most processing routines would be common to all modules validated, however. 

Data files are required for the power load profiles, O 2 /H 2 cryogenic tables, 
and output data tables. 

4. 7. 4. 2 Auxiliary Power Generation (APG) 

The APG consists of three Auxiliary Power Units (APU's) which provide power 
to the hydraulic pumps in the three hydraulic power systems. The three APU's 
are identical with each driving only one hydraulic system. APU's are identical 
with each driving only one hydraulic system. 

APG System Description 

Figure 4.7-73 (taken from Reference 20 ) is a schematic of the APU used for 
the Shuttle Orbiter. The fuel (N 2 H 4 ) is expelled from the fuel tank by a fixed 
quantity of nitrogen used as a pressurant. A turbine-driven fuel pump feeds the 
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fuel through control valves into the gas generator. The gas ts a 

heated catalytic bed which causes decomposition of the fuel into a hot gas . The 
hot, high pressure gas is then used to drive the turbine and exhausted overboard. 

A gearbox provides torque and angular velocity transformation to drive the fuel 
pump, AC generator (if any), oil pump and hydraulic fluid pump. The oil pump 
circulates the gearbox lubricant through the gearbox and the water boiler for 
cooling. The lubricant in the gearbox is pressurized by a tank of 6 N 2 via a 
pressure regulator. An electronic APU controller provides fuel flow modulation 
to allow startup, shutdown, and maintain normal turbine run speed. 

APG Module Description and Performance Parameters' 

Figure 4.7>74 is a schematic showing the APG .module functional elements and 
their interfaces with other modules. Table 4.7-21 is a listing of the APU para- 
meters. The functions performed by each element are discussed below; 

Fuel Source 

» N 2 pressure - function of temperature, Helium quantity, and N 2 H^ 

. quantity remaining. 

e Tank (fuel) temperature - function of heater power, .input, and N 2 H^ 
usage. 

c N 2 H^ quantity - function of initial quantity and fuel usage rate. 

Fuel Pump 

§ Pump flow rate - function of turbine speed and fuel density. 

« Pump bypass rate - function of fuel delivered to the gas generator, 
pump flow rate, and control mode. 

e Fuel source flow rate - function of fuel delivered to the gas generator 
and control mode. 

• Fuel pump torque - function of friction, speed, -flow, differential 
pressure, and moment of inertia. 

Gas Generator 

e Pressure - function of temperature, fuel inlet flow, gas flow out, and 
gas quantity. 

« Temperature - function of fuel decomposition rate, heater power, 
exhaust temperature, and turbine flow rate, 
e Gas quantity - function of turbine flow, fuel inlet rates, and 
decomposition rate. 
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TABLE 4.7^21 APU REFERENCE MODULE PARAMETER LIST (From Rof. 27 ; 


PARAMETER NOMENCLATURE 

DATA RANGE 

TYPE^ 

LOW 

HIGH 

UNIT 

Shutdown inhibit command 


ON 

EVENT 

P 

Propellant tank pressure 

0 

600 

PSIA 

CP 

Propellant tank temperature 

0 

+160 

DEG F 

P 

Tank heater-element A-B ON 


ON 

EVENT 

P 

Discharge line temperature 

0 

+160 

DEG F 

P 

Line heater-element A-B ON 


ON 

EVENT 

P 

Fuel pump discharge temperature 

0 

250 

DEG F 

P 

Package heater-element A-B ON 


ON 

EVENT 

P 

Fuel isolation valve-open command 


ON 

EVENT 

P 

Fuel isolation valve position 

Open 

CLD 

EVENT 

CP 

Lube oil heater-element A-B ON 


ON 

EVENT 

P 

Thermal bed heater A ON 


ON 

EVENT 

P 

Thermal bed heater B ON 


ON 

EVENT 

P 

Gas generator bed temperature 

0 

2500 

DEG F 

CP 

Controller power-on command 


ON 

EVENT 

p 

Status light - ready 

OFF 

ON 

EVENT 

p 

Start command 

• 

ON 

EVENT 

p 

Turbine speed 

0 

lOOK 

RPM 

CP 

Gearbox lube oil temperature 

0 

400 

DEG F 

CP 

Gearbox lube.^bil pressure 

0 

+100 

PSIA 

p 

Gearbox bearing temperature no. 1 

0 

500 

1 

DEG F 

CP 


® P - Performance Parameter 
CP - Critical Performance Parameter 
I - Input 
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Turbine 

• Turbine speed - function of turbine torque, j gear box lubricant 

temperature, hydraulic pump load, system friction, 
system moments of inertia, fuel pump rate, and AC 
generator output power. 

0 Turbine input power - function of turbine polytropic efficiency, gas 
inlet temperature, gas inlet pressure, and gas outlet 
pressure. 

• Discharge temperature - function of inlet temperature, turbine power, 
e Turbine fuel flow - function of inlet pressure, temperature, outlet 

pressure, and effective turbine flow area. 

f 

Gearbox 

§ Oil pump pressure - function of pump speed, oil temperature, and line 
resistance. 

c Oil pump flow rate - function of pump speed. 

• on pump torque load - function of oil temperature, flow rate, and 

line resistance. 

• Oil temperature - function of oil pump flow, return oil temperature, 

oil quantity. 

® Rate heat input - a functiori of friction and rotation (rpm). 

APU Control 

• Valve control(s) - function of input commands, turbine speed, 

temperatures. 

APG Reference Data Sources and Data Formats 

The APG module can be verified by use of reference module(s) or system 
performance data. The reference module (s) should have incorporated the most 
accurate systems performance data in order to achieve a high degree of fidelity. 
The systems performance data would include design requirements, analysis results, 
test results, and vehicle flight data. 

Figure 4.7-75 is a flow chart utilizing the reference data sources for 
verification. The sources of the systems performance data include: 

c MC201-0001 (Reference 34. ) - provides system and component design perfor- 
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mance requirements. 

• JSC-08934, Vol. I (Reference 31 ) - provides a compilation of design’ 

requirements, analysis results, test results, and performance 
predictions for various Shuttle systems. 

• SAPUCM (Reference — ) - the Simplified Auxiliary Povjer Unit Consumables 

Model allows the conduct of full consumable analysis for 
comparison with the simulation module. 

A reference module for the APU is shown in Figure 4.7-76 . 

APG Validation Methods and Check Cases 

The method of Section 5.1 and the selected reference module on the technique 
presented in Section 4. 2. 1.4 with the system performance data can be used for 
verification of the APG module. When utilizing the reference module, the following 
interface module drivers are required: 

• Hydraulic power - system functions, power load, and lubricating oil 
(Gearbox) cooling 

e Electrical power bus voltages 

• Control logic inputs 

1 . 

Check cases should include startup, shutdown, steady-state maximum hydraulic 
load, steady state minimum hydraulic load, mission hydraulic load profiles, and 
hydraulic load switching. 

APG Data Base Impact 

The impacts on the simulator data base are associated with the reference 
module, special drivers and check case data files. The selected APG reference 
module will have a large impact. The development of Figure 4.7-76 into a 
reference module (or the use of some detailed model) will be the bulk of the impact. 

Special drivers will also be required for the simulation module and reference 
modules. These drivers would include the hydraulic power subsystem, electrical 
power system, and control logic inputs. The hydraulic power subsystem driver .would 
provide hydraulic pump loads and cooling for the gearbox lubricating oil. Th6 
electrical power driver provides appropriate bus voltage levels for the heaters, 
control logic, and valve actuation. Switch positions, command inputs, and automatic 

inputs are provided by the control logic input driver, 
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(a) overview 


FIGURE 4.7-76. APU REFERENCE MODULE MATH FLOW. 
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(b) detailed math 


FIGURE 4.7-76. (CONTINUED) 
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FIGURE 4.7-76. (CONTINUED) 
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FIGURE 4.7-76. (CONTINUED) 
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FIGURE 4.7-7G. (CONTINUED) 
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LEGEND: ■" 

^66 ~ Mass of Gas Generator 

^rA “ Fuel mass available 
Residual fuel mass 
Fuel tank N 2 mass 

•^eKrtz- N 2 mass in Gear Box pressure bellows 
Lubricant mass in Gear Box 


ayv. 


Olt, 


“ Gear Box - N 2 source tank N 2 mass 
*^6 - Gas mass in Gas Generator 
Htpi ■* Mass of fuel in fuel line 1 (Run) 

“ Mass of fuel in fuel line 2 (Bypass) 

Muf - Mass of fuel .in fuel pump line 

Mip - Mass of lubricant in oil base 

M ~ Mach number of turbine flow 


^*-F “ 


Volume of N 2 in fuel tank 


V^r- Fuel tank volume 


Gear Box N 2 source tank volume 
VoK»z~ Gear Box N 2 bellows volume 
Gas volume of Gas Generator 


7^ ~ Fuel tank and fuel temperature 
T^p- Fuel tank compartment temperature 
1pF-iM“ Fuel pump inlet fuel temperature 
TfP-our Fuel pump outlet temperature 
71,-0- Generator inlet fuel temperature 
Tf>a~cT Lubricant pump outlet temperature 
” Gear Box lubricant temperature 

lubricant return temperature 
Lubricant temperature out of Hydraulic Boiler 
Gear Box N 2 source tank temperature 
"5 sa> 2.~ Gear Box N 2 tank compartment temperature 
7^ ~ Gas Generator temperature 
%,c ~ Gas Generator compartment temperature 
Turbine outlet gas temperature 

<T - Fuel heat of formation 

FIGURE 4.7-76. (CONTINUED) 
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'^(ciss flow rate of fuel from fuel tank 
Ai»F- Fuel pump mass flow rate 

Fuel flow rate through startup line 
Bypass line fuel flow rate 
Lubricant pump mass flow rate 
N 2 flow rate to Gear Box pressure bellows 
flow rate through turbine 
Fuel density 
^0 - Lubricant density 
Aji-Time increment 

Cp - Specific heat of fuel 

Specific heat at constant volume of N 2 
Co - Specific heat of lubricant 

- Specific heat of Gear Box 

Cyo - Specific heat of fuel gases at constant volume 

- Specific heat of gas generator 

- Specific heat of fuel gases at constant pressure 

- Fuel gases specific heat ratio 

L 

^2 gas constant 

- Fuel gas constant 

(|pF- Fuel pump volume displacement per cycle 
^pd - Lubricant pump volume displacement per cycle 
Fuel pump efficiency factor 
Lubricant pump efficiency factor 

^f=. - Fuel pump angular velocity 

- Hydraulic pump angular velocity 

~ Lubrication pump angular velocity 
Turbine angular velocity 

' - Gear ratio of fuel pump to turbine , 

f^o - Gear ratio of oil pump to turbine ! 

- Gear ratio of hydraulic pump to turbine 

FIGURE 4.7-76. (CONTINUED) 
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- 

fnLo ~ 

f/ILpt. "* 

- 

“ 

Tpp " 
■3«>p 

Jp - 
- 

Js - 
'^6'" 
^oi. "" 

Hpc. ~ 
H»t. ~~ 
Hr- 

/4- 

1t- 


System friction at turbine 

Oil line friction factor 

Fuel delivery line friction factor 

Fuel bypass line friction factor 

Fuel friction due to line real ted to pump shaft 

Friction losses of oil pump 

Friction losses of fuel pump 

Friction losses of hydraulic pump 

Oil pump and line friction losses 

Fuel pump and line friction losses 

Fuel pump moment of inertia 

Oil pump moment of inertia 

Hydraulic pump moment of inertia 

Summation of pump and fuel inertias 

Summation of pump and oil inertia 

System moment of inertia at turbine 

Gear Box moment of inertia at turbine 

Oil pump hydraulic power load 

Fuel pump hydraulic power load 

Hydraulic pump hydraulic power load 

Turbine power 

Hydraulic power load for turbine 
Turbine efficiency 


FIGURE 4.7-76. (CONTINUED) 
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The use of analysis/test/ design requirements reference data rt-quires the use 
of special drivers. These drivers establish and maintain proper conditions in the 
module which correspond to the analysis/test/design requirements conditions. The 
plotting or outputting of the simulation data would also require special subroutines. 
However, the total impact of the analysis/test/design requirements is small. 

The use of input/output files for special check case profiles may be required. 
The profiles would include hydraulic power profiles for launch and reentry-through- 
landing. 


k 
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4.7.5 Avionics 

Avionics subsystems are involved in sensing, communications, information 
handling, and control. The following subsections discuss avionics modules under 
the categories of Guidance, Navigation and Control; Communications and Tracking; 
Displays and Controls; Operational Instrumentation; and EPS Distribution and 
Control. Data Processing and Software functions are performed by flight hardware 
and software in the simulators of interest to this study. 

4. 7. 5.1 Guidance, Navigation and Control 

Guidance, Navigation and Control subsystems and components are used for 
sensing vehicle-related observables, using these sensor data to estimate vehicle 
state variables, and defining and executing desired vehicle maneuvers. The 
subsystems and components in this category include inertial measurement units, 
strapdown gyros and accelerometers, propulsion systems interfaces, optical 
trackers, and the aeroflight control system. 
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4. 7, 5. 1.1 Inertial Measurement Unit (IMU) - The IMU is ust . ae the inertial 

orientation and acceleration of the vehicle. 

IMU System Description 

Generally, three types of IMU's are employed in spacecraft; 

• three-gimbal platform - as used in the Apollo Command Module. 

• four-gimbal platform - as used in the Gemini spacecraft and currently 
baselined for Shuttle (see Refs. 20, 35 ). 

f strap-down platfonri - similar to the backup attitude reference system 
on Apollo; considered as an alternate attitude reference system for 
Shuttle. 

Regardless of the type, the IMU outputs directly perceivable by the crew 
consist of three angular readouts which describe the orientation of the spacecraft 
with respect to an inertial reference. In addition, accelerometer outputs are 
input to the onboard computer for processing. In the case of the four-gimbal 
platform, the output of a redundant inner roll gimbal is also input to the 
onboard computer. This gimbal provides the capability of preserving the stable 
member attitude reference during "gimbal lock" conditions. The output of this 
gimbal is used by the flight computer to prevent gimbal lock, but is not 
normally displayed to the crew. 

The performance verification methods presented in this section are 
particularly suited to the four-gimbal arrangement, since this design has 
all -attitude capabilities under normal conditions of body rates. Additional 
development v/ould be required to verify IMU simulation in and around the 
gimbal -lock regions characteristic of the other two types of IMU design. 

IMU Module Functions and Performance Parameters 

Figure 4.7-77 depicts the interfaces between the IMU module and the rest 
of the simulation. Inputs come from four basic sources: 

0 MDM (Multiplexer/Demultiplexer), which provides the "operate" 
discrete and the flight software torquing and slew commands. 

reproducibility of Ti. 
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• EPS (Electrical Power System)* which provides the 28 Vdc operating 
power, 

• ECLS (Environment Control and Life Support) system, which provides 
the thermal control. 

t Environment, which provides the vehicle dynamics sensed by the 
platform: angular rotation and inertial acceleration. 

Outputs of the IMU fall into four categories: 

• Status discretes which are used by the flight software and 
the Caution and Warning (C & W) system. 

• PMS (Performance Monitor System) Data, which are used by the flight 
software performance monitor system for its redundancy management function. 

• Gimbal angle resolver data, which consists of sine and cosine data 
from the coarse (IX) and fine (8X) resolvers attached to the individual 
gimbals and is used by the flight software and the FDAI for determining 
the orientation of the vehicle with respect to the stable member of 
the platform. 

• Accelerometer Data, which consists of the M accumulator outputs 
and is used by the flight software to determine the total inertial 
acceleration acting on the vehicle. 

Using the current Shuttle baselined four-gimbal platform as a reference, . 
the performance parameters as defined in Ref. 20 are summarized in Table 4.7-22. 

Note on this table that the three primary gimbal angles (not the resolver 
sine and cosine outputs) have been chosen as critical performance parameters. 

The fourth gimbal is a redundant roll gimbal which is forced by the stabilization 
loop to remain at or ne^ zero. It only has a non-zero value during the time 
that the platform is in the condition that would result in gimbal -lock in a 
three gimbal platform. Since the stabilization loop of the IMU is not expected 
to be part of the simulation software (Reference 11 ), the role of this redundant 
gimbal in the simulation is unknown. Some empirically-determined "kluge" 
simulation may be incorporated to provide a "wobble" in the FDAI during these 
conditions; however, verification of this implementation would be dependent on 
the manner of its simulation, and. is therefore not addressed in this newsletter. 
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TABLE 4.7-22 . IMU MODULE PARAMETERS 


■YM20L 

... .DESCRIPTION . 

TYPE® 


"Operate" discrete 

I 


Electrical power 

I 


Avionics Bay temperature 

I 


Gyro torquing and gimbal slew commands 

I 


Body angular rate vector 

I 

a 

Body sensed acceleration vector 

I 


Status discretes (IMU ready, operate mode. 



overtemperature, IMU fail) 

0 


PMS data (redundant sensed angular rate, oven 



temperature, IMU mode/BITE status 

0 


Gimbal angle resolvers: 



• outer roll (coarse/fine) 

P 


• pitch (coarse/ fine) 

P 


• yaw (coarse/fine) 

P 


• inner roll (fine only) 

P 

(D 

Gimbal angles (roll, pitch, yaw) 

CP 

'‘r 'z 

AV accumulator outputs 

P 

— 1mu 

Instantaneous accelerometer outputs 

■ * 

: 

CP 


LEGEND: 

I = input 

0 = output 

P = performance parameter 

CP = critical performance parameter 
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fMlJ Reference Data Sources and Data Formats 

Two methods are presented in this section to provide ideal (closed- form 
solution) IMU angular information in response to selected vehicle body rate 
inputs. The first method, the "constant rate input method", employs constant 
body rates or stable member drift rates as inputs, and computes the resultant 
gimbal angle time histories. The second method, the "closed-form gimbal angle 
input method", computes 'the body rate time history which must be input to produce 
a pre-selected gimbal angle time history. 

These methods apply only to the nominal operation of an IMU. Failure 
modes, effects of off-nominal temperature or power conditions, and control 
logic are not considered. In the design of these IMU reference math models, 
only rate and acceleration inputs and gimbal angle and accelerometer outputs 
are considered. Generation of status discretes and PMS data would require a 
high-fidelity representation of actual hardv;are operational logic, which is 
best obtained from test data. Similarly, determination of IMU responses to 
input voltages and temperatures will require test results from the actual flight 
hardware. Generation of the IMU responses to slew commands and gyro torquing 
commands would involve a high fidelity simulation of the flight hardware 
stabil ization loop. Approximate data for the response to gyro torquing commands 
can be generated by equating the torquing commands to the gyro drift rates in the 
reference module presented in this section. 

Constant Rate Input Method - By holding the rate input to an IMU constant, the 
total angular displacement can be determined as a linear function of time. The 
corresponding IMU gimbal angles can be easily determined by first defining the 
total angular response in terms of quaternion elements. Once the time history of 
quaternion element variation is determined, the individual gimbal angles can be 
extracted from the body/lMU direction cosine matrix, which is a function of the 
quaternion elements. 

Two types of rate inputs are considered: 
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e body rates (p, q, r) - three components of angular velocity 
about the body axes. 

e drift rates (D^, D^, D^) - three components of angular velocity 

about the stable member reference axes. (These rates can also be 

interpreted as gyro torquing commands from the flight software.) 

Both types may be input in a single run. Other input data required are: the 

iteration rate { t) at which the resultant gimbal angles are to be printed • 

out; the initial gimbal angles ( ); the body- axis referenced 

accelerations (A^, A ), to check the IMU accelerometer computations; and the 
A y z 

time (t „) at which the run is to stop, 
max ^ 

Figure 4.7-78 presents a math flow of this technique. An initialization path 
Is incorporated, to allow the capability to preset the gimbal angles to any value 
prior to initiating the input rates. Additional data is computed (including an 
initial direction-cosine matrix, C) concerning the orientation of the angular 
velocity vector v/ith respect to the initial stable member orientation, which 
serves as the inertial reference for the remainder of the computations. 

After the initialization pass, the gimbal angles at each time increment (At) 
are computed. This computation progresses as follows: i 

1) Time is incremented by At. 

2) The total angular displacements of the body ( -H. ^) and of the stable 

member (-0,^^) from their initial orientations are computed as linear 
functions of time. 

3) The quaternion elements (d^ , 62 , d^j d^) defining the angular displace- 

ment of the stable member are computed as a function of total drift 
angle and the orientation of the drift vector. 

4) The direction cosine matrix (D) defining the orientation of the stable 

member with respect to its initial position is computed. 

5) The quaternion elements (r-| , V 2 » r^) defining the angular displace- 

ment of the vehicle are computed as a function of the total displacement 
"^r, and the orientation of the rate vector. 
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drift rates - Dx,Dy,D2 
body accel . - Ax,Ay,Az 
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max. time - tj^ax 
delta time - At 
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p/wr 

cos 

“d 

=: 

Dx/wd 

cos 

&r 

= 

q/wr 

cos 

3 d 

= 

Dy/Wd 

1 cos 

Yr 

= 

r/wr 

1 cos 

Yd 

- 

Oj/wd 

















MDC E1201 
30 December 1974 



Ri 2 = 2(r4r3+r2ri) 

Ri 3 = 2(r4r2-r3ri) 

Rzi = 2(r4r3-r2ri) 

H22 = ri^-rz^+r3^-r4^ 

R 23 .- 2 (r 3 r 2 +r 4 r,i) 

R31 = 2 (r 4 r 2 +r 3 ri) 

R32 = 2 (r 3 r 2 -r 4 ri) 

R33 = ri^+P 2 ^-r 3 ^-r 4 ^ 



© 



[B] = [R] [C].,[D]- 


0 “ -ARC SIN (B 13 ) 
t » ARC TAN (Bi 2 /g ) 
0 = arc tan (B 23 /B 3 © 


FIGURE 4.7-78 (CONTINUED) 
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6) The direction cosine matrix (R) defining the orientation of the vehicle 
with respect to its initial position is computed from the quaternion 
elements. 

7) The direction cosine matrix (B) defining the orientation of the vehicle 
with respect to the stable member is computed as a function of the three 
previously defined matrices. 

8) The gimbal angles describing this orientation are extracted from the B 
matrix. The equations presented are valid for a gimbal sequence of 
yaw { 'j' ), pitch {©), roll (^); other sequences can be treated in a 
similar manner. 

9) The ideal IMU accelerometer outputs are computed using the B matrix 
and the input body-referenced accelerations, 

10) The gimbal angles and accelerometer outputs are stored for comparison 
with simulation software outputs. 

Closed Form Gimbal Angle Input Method - The previous method is primarily suited 
to verifying the IMU performance during orbital conditions, where the body rates 
tend to be constant for considerable periods of time. It is also necessary to 
verify the IMU performance for variable body rates such as encountered during 
entry conditions." The math flow shown in Figure 4.7-79 describes a method for 
establishing a closed-form relationship between variable body rates and IMU gimbal 
angles. 


This reference module, given a desired IMU output time history, "inverts" 
the IMU transformation to generate the body-rate time history which must be i nput 
to the IMU. To do this, it is necessary to restrict the form of the input. Each 
gimbal angle time-history must be an analytic function of time; thus the time 
derivative of the function (i.e., gimbal angle rate) is precisely computable. 
Three typical examples are; 

= A sin w-jt A w-| cos w-jt 


o = 



-1/t-D 
^ c 



e= 


+ (t^-D^) 


E [cos W 2 t + (w^t) sin Wgt) ^ = E (w 2 t) cos W 2 t 


With the gimbal angle rates thus defined, the corresponding body rates are .■ 
determined by standard Euler transformations, The body rate data is then written 
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on an output tape for each computation interval required by the simulation 
software. 

I MU Data Base Impact 

Data base impact for initial IMU dynamical validation is very minor; only 
the above reference modules and a few mathematical subroutines are required. 
Revalidation of the basic IMU dynamics should be required rarely, if at all. .. 
Validation of subsidiary IMU outputs will require a certain amount of hardware 
test data. 

IMU Validation Methods and Check Cases 

Verification software structures employing the closed-form-solution reference 
modules previously described are shown in Figure 4„7-80 . 

To use the constant rate input method, Figure 4,7-80 (a)> input constant 
body rates and/or drift rates to the IMU reference module and the IMU simulation 
module, thus obtaining comparable gimbal -angle time histories. 

To use the closed-form gimbal angle input technique. Figure 4.7-80 (b), 
select analytic functions of time to be used as inputs (see preceding examples). 

These time-histories and their derivatives are. input to the reference module, 
which generates body-rate time-histories to be Input to the IMU simulation module. 

The outputs of the IMU simulation module should then match the original gimbal- 
angle time histories. 

A set of check cases applying different combinations of magnitude and 
frequency inputs to the various IMU axes should be used for thorough validation 
of individual -axis responses and their interactions. Due to the analytieel •• 

nature of the reference data, a highly-accurate match with simulation data 
sho'-Td be demanded; e.g . , one percent or better over time spans up to a hundred 
seconds. 
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i 7 ^ 5 j. 2 Strapdov/n Inertial Sensors - This section concerns those inertial 
-v'lv.ors which are "strapped dovm"; i.e., rigidly mounted to the vehicle structure, 
rather than on a stable element. 

SI S System Description 

The SIS subsystem, as described in Refs. 20, 37 , consists of five identical 
sensor packages - three at various locations in the Orbiter, and one in each SRB. 

Each package contains a normal and lateral accelerometer, and orthogonal rate 
gyros to sense body roll, pitch and yaw rates. These sensors provide data for 
use in the vehicle attitude control loops. The SIS has also been considered for 
use as a backup navigation data source in the event of multiple IMU failures. 

This application would require the addition of longitudinal accelerometers. 

SIS Simulation Module Description and Performance Parameters 

The input/output interfaces of the SIS module are shown in Fig. 4.7-Bl . 

Primary inputs are of course the body angular rates, the body-axis sensed 
accelerations of the center of mass, and the current c.g. position. The primary 
outputs are the simulated rate gyro and accelerometer outputs, which include the 
effects of sensor location, axis misalignment, and possibly hardware error 
characteristics. (Hardware error modelling may not be required, '-nless the STS 
is used as a backup navigation reference.) Body bending and fuel slosh contri- 
butions to SIS outputs are discussed in Section .4.6 . Subsidiary inputs and 

outputs include electrical power, avionics bay temperature, and various status 
and failure discretes. Table 4.7-23 provides a parameter list for the SIS 
simulation module. 

SIS Reference Data Sources and Data Formats 

Figure 4.7-82 provides the math flow for a reference module which provides 
data for nominal SIS operation only. Off-nominal operation due to failures and 
voltage variations and temperature variations is not considered in this study. 

Two separate flow paths are shown on Figure 4.7-82 : an error-free 
computation path, and a measurement-error path. On the error-free path. Equation 
(1) calculates sensed vehicle accelerations at the sensor-package location, in ideal 
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FIGURE 4.7-81 . STRAPDOWN INERTIAL SENSOR MODULE INTERFACES. 
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> f 4.7-23. STRAPDOWM INERTIAL SENSOR MODULE PARAMETERS 



DEFINITION 

TYPE^ 

j »y » ^ 

Body coordinates of center of gravity 

I 

* a 

Vehicle sensed acceleration 

I 


Vehicle angular rate and acceleration in 

I 

1 . . . 

body axes 


AT 

Difference between operating temperature and 
calibration temperature of the SIS 

I 

X^. ,y . ,Z . 

Typical sensor locations (in body coordinates) 

DB 

Accelerometer/ rate gyro misalignments (</'' = 
misalignment in X-Y plane, misalignment 



in X-Z plane, misalignment in Y-Z plane) 

DB 

D 

Accelerometer dead zone 

DB 


Accelerometer measurement errors 

DB 

fPd.f0d’6'"d 

Rate gyro measurement errors (roll, pitch. 


yaw drift rates respectively) 

DB 

-ia 

Accelerations at the accelerometer, in 


ideal axes 

P 

^a 

Accelerations at the accelerometer, in 


misaligned axes 

CP 

Pma’‘^ma’'^ma 

Vehicle angular rates, in misaligned axes 

CP 


^LEGEND: 


DB = data base input 
I = input 

P = performance parameter 
CP = critical performance parameter 
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'.onsor axes. Equations (2) and (3) then transform the ideal-axis accelerations 
and angular rates into true sensor-axis outputs, using small -angle relationships 
for axis misalignments. A single misalignment transformation is used for both 
accelerometer and gyro outputs, since the use of a typical misalignment provides 
all the generality required for a complete verification. 

The measurement-error computations are provided on the assumption that some 
or all of the simulations of interest will require sensor error modelling. The 
measurement-error path is taken only when an input flag is s‘et.' 

The accelerometer measurement error reference data is generated using Equations 
(4) and (5) of Fig. 4.7-82 , where D is from the data base and represents a typical 
dead zone or threshold below which no acceleration is sensed, and the functions 
FAY and fAZ are generalized representations of the measurement errors that would 
be added to the true axis accelerations. Equation (7) presents an expansion for 
the accelerometer error function f A of Equation (5), using a standard modelling 
algorithm for typical accelerometer measurement errors. 

Ai = ^ 1^1 ^ 2^1 ^ ^ 12^2 ^ 13^3 ^ 14 ^ *’* 

The parameters in Equation (7) are defined as follows: 

B, = accelerometer total bias (mean + random) 

a 

A-j ,A2,A2= acceleration components along the input axis and the cross-axes, 
respectively 

C-j = linear scale factor error 

C 2 = non-linearity error coefficient 

^12, *"13 " cross-axis sensitivity error coefficients 
at = difference between calibration temperature and operating 
temperature 

C-j^ = linear temperature error coefficient 
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It miiy not be necessary to model all the terms shown in Equation (7), 

*. iT.ding upon the fidelity required.- In addition, Equation (7) does not represent 
ii'ost general case; for example, we could include higher order non-linearity 
toiv’s, error tenns proportional to acceleration products, and non-linear temper- 
.ittii'c variations. The necessary terms in the error model can be determined 
using vendor-supplied design and test data for individual errors, the real-world 
sensor use, and the simulator's functional requirements. Typically, bias, linear 
scale factor, second order non-linearity and linear temperature error terms would 
be all that is required for sensors involved in a navigation function. 

Equation (6) provides rate gyro measurement error reference data, where the 
functions £Pg, £Qq, and £Rp are generalized representations of measurement 
errors based on sensor design and test data. The error values output would 
normally be added to the true rate outputs as drift rates. Equation (8) presents 
an expansion for gyro drift rate, using a standard modeling algorithm: 


£. = + K.A. + + K^A^ + 

D g 11 00 ss 


, + K. A.A^ + A„A^ 
10 1 0 OS 0 s 


+ K,.A A. + K. AT + 

SI S 1 t 


v/here the individual parameters are defined as follows: 


0) 


A,.Ao.A^ 


AT 

K. 


= gyro total bias drift (mean + random). 

= case accelerations along the input, output, and spin axes 
respectively. 

= anisoelastic drift coefficients 

= difference between calibration temperature and operating 
temperature 

= linear temperature coefficient 


It may not be necessary to model all the terms of Equation (8), or it might be 
necessary to model additional terms; for example, drifts proportional to 
acceleration squared or possibly drift due to external magnetic fields. As wi’lh 
the accelerometer error modeling, gyro' error model fidelity should be determined 
using vendor-supplied design and test data on individual errors, the real-world 
sensor use, and the simulator's functional requirements. 
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The gyro case accelerations shown as variables in the error functions of 
Equation (8) are the same as the body accelerations for the accelerometer error 
functions. The transformation of AX, AY, and AZ into gyro input, output, and 
spin axis accelerations depends on the individual gyro orientatiDns . As a 
result the individual drift rate’ equations for '£Qj;jr“.and will have 
different body acceleration components as the respective gyro axis accelerations. 
Since the error model is not affected by the preceding generalizations, there 
is no loss in the validity of the verification. 

The data required for validation will normally be in hard-copy format. Basic 
information, such as sensor package locations and typical misalignments, should 
be found in Ref. 36 . Hardware error coefficients may have to be obtained 

from test reports or other less-accessible sources. 

SIS Validation Methods and Check Cases 

In general, checkpoint data will be required for both error-free and measure- 
ment-error modes of operation of the SIS module. Although reference-trajectory 
segments may be used to provide input data, selected discrete checkpoints will be 
simpler to implement, and actually give better results. 

For reference data not containing measurement errors, the inputs include 
sensor location in the body reference system, the center-of-mass accelerations, 
body angular rates and angular accelerations, and a zero value for the measurement- 
error flag. Only a relatively small number of independent input check points are 
required for a complete verification for this mode, since the equations involved 
are relatively simple. Sets of three widely-spaced linearly-independent vectors 
in linear acceleration, angular rate, angular acceleration and axis misalignments 
will provide a thorough validation exercise. Several sensor-package locations 
should be tested, including fore/aft, left/right, and up/down displacements 
relative to the c.g. Agreement between reference and simulation data should be 
close to machine accuracy (e.g., five to six significant figures). 

When generating reference data for the error model verifications, the required 
inputs are the accelerations at the sensor in the sensor true axes (assumed the 


4.7-239 


MC:jaoP4iV!zi.L. acn.iGi.AS ctyruPM/yv - 


MDC El 201 
30 December 1974 


.. tor both accelerometers and rate gyros), the operating temperature variation 
< 1 . ■! that for calibration, and a positive value for the measurement-error flag. 
Tito can be generated by varying the inputs selectively to magnify effects of 
different error terms. Comparisons can then be made v/hich are identifiable with 
individual error components. Agreement should be within a few percent. 

When driving the simulator models to generate the corresponding data, we 
anticipate that some action will have to be taken to provide compatibility with 
the reference module execution mode. For example, contributions due to flexible 
body dynamics must be zeroed; simulation-module measurement-error models must be 
deactivated for non-measurement error check points. For the measurement error 
check points, sensor locations should be set to the center of gravity, with zeroed 
misalignments. Since the simulator software has not yet been developed, only the 
preceding generalizations are made with respect to interface initializations and 
input identifications required for the simulator module. 

SIS Validation Data Base Impact 

Data base impact for SIS module initial validation is very minor. The 
reference module is rather simple, and the use of discrete checkpoints obviates 
handling of large data files. Revalidation would only be required if significant 
changes were made in the measurement-error model. 
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4, 7. 5. 1.3 Propulsion Systems Interface Units (PSIU's) - These units, whicli 
transfer data betv/een the propulsion subsystems and flight computers and/or crew 
controls and displays, include the Main Engine Controller/Engine Interface Unit 
(MEC/EIU), the Solid Rocket Booster (SRB) interface, the Orbital Maneuvering 
System Thrust Vector Control (OMS TVC) interface, and the Reaction Control System 
(RCS) interface. 

Except for the MEC/EIU, these are rather simple hardware units, and we assum.e 
that their functional simulation, data-word generation/interpretation capabilities 
and -malfunction-insertion provisions will be "embedded" in the module which 
simulates the corresponding propulsion subsystem. Only the MEC/EIU will be 
described in any detail in this section; the other PSIU's perform the same 
general functions. 

PSIU Subsystem Descriptions 

The MEC hardware and functions are described by Ref. 26 , the MEC software 
by Ref 38 . The EIU is described by Ref. 39 . Specifications for the other 
PSIU's have apparently not been issued yet. 

The MEC and EIU together perform the following functions: 

! 

e Accept discrete (e.g., start, shutdown) and variable (e.g., thrust level) 
commands from the Orbiter avionics. 

6 Control SSME sequencing, thrust, and mixture ratio. 

® Perform engine checkout and monitoring. 

c Transmit SSME checkout/monitoring data back to the Orbiter avionics 

• Perform self-test. 

Figure 4.7-83 (after Ref. 26 ) shows the control and data interfaces of the 
MEC/EIU. The EIU's role in control/data interchange is simply code conversion and 
formatting. Other PSIU's perform similar functions, except for thrust variation. 

PSIU Module Description and Performance Parameters 

PSIU simulation has two aspects: functional simulation, and data-word 

generation/interpretation. From the functional viewpoint, we assume that each 
PSIU simulation is "embedded" in the module which simulates the associated 
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FIGURE 4.7-83 . MEC/EIU HARDWARE INTERFACES 
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ilsion subsystem. Thus the overall command/response characteristics of each 
' r. ; jlsion module will be a co.nposite of (a) the internal processing of the PSIU 
! (b) the response of the propulsion hardware - pumps, valves, combustion 
i.f^r'ber and nozzle. Startup/shutdown sequencing will probably be simulated as 
I'-pirical time functions for thrust buildup/tai loff . 

Tne other basic function of the PSIU modules is the handling of digital 
(Jata-v/ords , including interpretation of command words received from the flight 
computers, and generation and formatting of monitoring and status words for 
transmission to the flight computers. These functions must be implemented pre- 
cisely to satisfy the flight software; however, they will be shared with or 
entirely absorbed by the Flight Hardware Interface Device (FHID), thus simplifying 
the simulation software. 

Each PSIU module will «lso require some failure-insertion provisions; 
simulated failures may affect either the functional simulation, the data-word 
handl ing , or both. 

No performance-parameter tables are provided for PSIU simulation modules. 

Since PSIU simulation is embedded in the propulsion subsystem simulation module, 
the performance parameters for each such module will include both functional- 
simulation parameters and avionics-related command and status words. For example, 
see Sfc. ■''ion 4.7. 3.1 for the SSME/MEC/EIU parameter table and simulation-module 
interface diagram. 

PSIU Reference Data Sources and Data Formats 

The functional performance of each PSIU simulation will be implicitly 
validated by end-to-end command/response validation of the associated propulsion 
module. This will include static thrust levels, thrust buildup/tailoff , and 
(for the SSME only) throttle response. 

The basic source of functional-simulation reference data will be engineering 
simulations of each propulsion subsystem. Later in the program, engineering data 
will be refined using static-firing data; these data will be corrected for ‘ 
atmospheric pressure in the case of the larger engines, but vacuum-chamber firing 
-ita will be available for the smaller engines. These considerations are discussed 
in Section 4.7.3. 

4.7r?.43 


n^ooo/w/vei-f. ckjujglj^s coMP/x/htv • east 



MDC El 201 
30 December 1974 


Command/status data-word formats must be verified bit-by-bit for each nominal 
and off-nominal case, the basic source of reference data being the most current 
version of each PSIU specification. 

Due to the complexity of the MEC/EIU, it may be necessary to verify this 
submodule in isolation, before integration with the basic SSME module. The 
hardware/software MEC simulation described by Ref. 40 may be a suitable source 
of reference data for such an exercise. 

PSIU Validation Methods and Check Cases 

Each composite PSIU/propulsion-subsystem module must be exercised over its 
overall operating range, including startup, constant thrust, and tailoff. 
Additional check cases will be necessary for the variable-thrust SSME. These 
will include static-thrust levels from MPL to EPL, as well as dynamic throttle 
response to both increase and decrease commands over the operational static-thrust 
range. For simulators which use functional simulation of the flight software, 
the cpmmand inputs will be in- the normal internal floating-point format of the 
host computer. 

For simulators using flight-computer hardware, inputs must be in the format 
in which they will be received from the flight computer/FHID. The set of check 
cases must then be sufficient to verify that each PSIU module properly interprets 
all valid flight-computer command words, and returns the correct status/monitoring 
words for all self-test modes, nominal and off-nominal operational modes. 

PSIU Validation Data Base Impact 

In the functional-simulation area, validation of the PSIU's contributes no 
data base impact, since PSIU functions are implicit in the -end-t^-end validation 
of the propulsion modules. 

Validation of digital data-word handling will require a command/response 
data-word "dictionary" covering the operational regime of the simulator of 
interest. For the MEC/EIU, this dictionary will be fairly extensive (several 
hundred entries); for other PSIU's, the dictionaries will be short (perhaps a 
few dozen entries) . ■ 
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4^7. 5. 1.4 Star Tracker (ST) - Unlike previous manned space vehicles, the Orbiter 
provides fully automatic star/target tracking, without crew viewing of the tracker 
field. This section discusses the ST hardware and its flight-computer interface, 
as well as the functions and validation of the associated simulation module. 

ST Subsystem Description 

The ST is a strapdown, wide field-of-view (10 X 10°) image-dissector device. 

It provides automatic acquisition and tracking, under flight-computer control, of 
a selected star or sUn-ilTuminated rendezvous target. While tracking, it outputs 
the apparent magnitude and position in the field of the object being tracked. 

Its sensitivity (acquisition threshold) is variable on command; the maximum 
sensitivity is sufficient to acquire and track the 153 brightest starts (S-20 
magnitude), or a sunlit target whose apparent brightness is at least equivalent 
to an S-20 magnitude of +3 at a range of 300 nm. 

Despite the stray-light protection afforded by its light shade (LS), the ST 
may fail to acquire, or lose track on, stars or targets which are in the vicinity 
of other bright objects; e.g. , the sun, moon, earth, or a brighter star. To protect 
the tracker from damage due to excessive input brightness, it is provided with a 
shutter, activated by a separate bright source sensor. Field of view and response 
time of this subsystem are sufficient to prevent damage due to a bright object 
approaching at a rate of 10 deg/sec. 

The physical arrangement of the three ST/LS assemblies, mounted on the nav 
base for maximum accuracy, is shown in Figure 4.7-84 (from Ref. 41 ); additional 
detail may be found in Ref. 42 . Note that #1 and #2 star trackers provide over- 
lapping coverage. 

Star tracker operational modes, internal signal processing, and command/data 
interfaces are indicated by Figure 4.7-85. The modes of interest are: 
e Open/close door 
c Self test 

c Search/acquire star or target 
« Track star or target 
c Break track 

® Close shutter (bright source protection) 

4.7-245 

rvscacH\tN£t.i. ooaai.jas - east 


J.SV3 • fi^iJ-nV/VOUJ-SV SV7t//'>00 


Vehicle azimuth -v 
determination cube v/«=n 3 C? 


PItchi 






+V, 'H3 

* O 


Star tracker 3 




o> /S^ 


mM 





Star tracker 2 


«5D- 


Star tracker 1 


■Azimuth determination 
cube CGSE) 


Axes In relation 
to orbiter axes 


X /Y /2 = orbiter axis 
0 0 0 

CL = tracker 1 

FOV centerline 

= tracker 1 

horizontal deflection 


= tracker 1 

vertical deflection 


FIGURE 4. 7-HA. STAR TRACKER PHYSICAL ARRANGEMENT 


MOC El 201 
30 December 1974 






* “PRODUCIBILITY OF THE 
t ^OfNAL PAGE IS POOR 




2 

0 

c 

0 

2 

? 

> 

r 

C 

0 

c 

rs 

«■ 

7! 

i> 

Vi 

0 

c 

s 





ro 





FIGURE n.7-n5. STAR TRACKER FUNXTIOUAL BLOCK DIAGRAM (REFERENCE) 


MDC E1201 
30 December 1974 














MDC E'I201 
30 December 1974 

The star tracker door, in the left side of the Orbiter fuselage, is closed 
durinq ascent and entry, and opened on orbit. The self-test liiode activates ST BITE, 
causing the ST to return a discrete indicating either operable or failed status. 

In initiating a search, the flight computer sets the acquisition threshold, 
and may also provide horizontal and vertical position offset coordinates. In the 
absence of offset coordinates, the ST searches its entire field, locking onto either 
the first catalog star acquired, or to the brightest object in the field. If given 
an initial offset, it searches a reduced field centered on the offset point. In 
either case, a rectangular raster-scan search pattern is used, the search time 
will not exceed ten seconds, and the ST falls into the track mode. 

The ST remains in the track mode until given a "break-track" command, the 
object passes out of the field of view, or it loses lock due to excessive vehicle 
rates or bright-source interference. Since the ST's are strapped-down, it may be 
necessary for Orbiter attitude maneuvers to be executed to maintain tracking. 

(Note that Ref. 41 does not presently define ST discretes for search failure or 
Toss of target during track.) 

ST Module Description and Performance Parameters 

Star tracker functions will be simulated at varying levels of detail. Door 
opening and closing will be simulated as talkback, with time delay and allowance 
for malfunction insertion. Self-test operation' can be simulated with a small 
command/response dictionary which allows for nominal status and a repertoire of 
inserted malfunctions. 

To obtain realistic star selection and timing results, the search/acquire 
mode simulation will have to be rather detailed. For all stars which are not 
blocked by the sun, moon, or earth, and satisfy the magnitude criterion defined 
by the current threshold selection setting, coordinate transformation and gating 
operations will determine whether they fall in the range of the scan pattern. To 
determine the first star acquired, a "lexicographic ordering" operation (see 
Ref. 43 ) will be required to determine which of the candidate stars is "nearest" 
to the starting corner (shown as the bottom-left corner in Figure 4.7-86, in terms 
of scan-pattern coordinates. Hardware scan-rate parameters can then be used to 
compute the acquisition time. 
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The scan computations per se will be simpler for target acquisition, or for 
the search mode in which the brightest object in the field is selected. However, 
computation of target brightness will require determination of terminator position, 
range to target, and target viewing aspect (e.g,, broadside vs. end-on). 

Simulation of tracking outputs requires only a simple coordinate transformation, 
plus logic for loss of tracking due to excessive vehicle rates, movement of the 
object out of the field, and inserted malfunctions. Hardware error sources (bias 
and random) and stellar aberration due to Orbiter inertial velocity will also be 
simulated. 

Bright-source relative positions and closure rates must be simulated at all 
times that any star tracker is operational. 

Star tracker simulation module parameters are listed in Table 4.7-24, and 
module interfaces are shown in Figure 4.7-87. 

S T Reference Data Sources and Data Formats 

Initial validation of the track mode is best supported using closed-form 
solutions, for several special orientations of the ST axes relative to the. point 
targets used for testing. 

For more complete validation (all operational modes, interface with environ- 
ment and dynamics), a detailed reference module will be required. Two candidate 
reference modules have been identified. One of these was developed, checked out, 
and used for the study described in Ref. 44 . However, we recommend the module 
now being developed and checked out for inclusion in SVDS, the math flow of which 
(Ref. 45 ) is presented in Figure 4.7-88. Note that the search-mode simulation in 
this module only simulates the brightest-object selection criterion. Modifications 
will be necessary if the first-object-acquired criterion of Ref. 41 is actually 
implemented in the flight system. 

ST Data Base Impact 

The reference module for ST simulation validation is quite detailedi it vvill 
be of the same order of size as the ST simulation module for the SMS, larger than 
the one for the SPS. In addition, a driver routine will be required to generate 
Orbiter and target states and rates. Initially, these should be just synthetic 
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TABLE 4.7-24. STAR TRACKER MODULE PARAMETERS 


SYMBOL 

DESCRIPTION 

TYPE^ 


Door-open discrete 
Search-mode command discrete 

I 

I 


Initial search position commands (horizontal and vertical 
displacement) 

r 


Self-test mode command 

I 


Threshold-set command 

I 


Break-track command 

I 


Bus voltage 

I 

r» V 

Orbiter position & velocity (ECI axes) 

I 

6jr 

Target relative position (Orbital axes) 

I 


Orbiter attitude 

I 

03 

Orbiter angular rate vector 

I 


Star catalog (magnitudes, unit vectors in ECI) 

I 


Sun & moon positions (unit vectors in ECI) 

I 


Earth horizon altitude 

I 


Tracker alignment angles 

DB 


Horizontal & vertical scan rates 

DB 


Tracker hardware errors (bias, scale factor, and random) 

DB 


Shutter-closed discrete 

CP 


Self- test data 

P 


Track-mode engaged discrete 

P 


Star/ target tracking position (horizontal & vertical 
displacement) 

CP 


Star/target apparent magnitude 

CP 


= input 

DB = data base input 
P = performance parameter 
CP = critical performance parameter 
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Inputs: 


n(3.3) 

angular rotations defining star tracker coordinate 
frames with respect to the shuttle body frame 

. n£L(3) 

angular factor to account for celestial body brightness 

RB(3) 

average radii of the earth, sun, and moon 

KATH 

angular factor f:i' the earth's atmosphere 

RE 

effective radius nf the earth for sun occultatlon 

HftZV 

rendezvous tracking flag 

FOV 

star tracker raster field of view (one half of the side 
of the square! 

AFOV 

auto-optics flel; of view 

HSTAR 

number of stars In the star table 

CFOV 

half-angle of tft circular field of view enclosing 
the star tractor square raster field 

RMAX 

maximum range fcr beacon tracking 

BHAG , 

beacon visual marnltude 

THAG 

sun-1 llumlnatcd tarrec visual magnitude 

T 

elapsed time slntn the clock epoch 

R(3) 

vehicle position vector 

RT(3) 

target vehicle poiltlon vector 

lTk(3) 

star tracker ac"-lvat1on flags 

HAUI0P(3) 

auto-optics flags 

MBC0«(3) 

beacon tracking flags 

PSIC011{2,3) 

auto-opi.lcs angiil ir comm.inds 

T1B(3,3) 

ECI-to-liody trarisfoimatlon iratrix 


lABETft 

1N0I5E 

imstL 

ISCAU 

IQUAilT 

CNOIS 

PH!(3,3) 

SF<3,2,3) 

QUAHT 


Outputs: 

ITRAC(3) 

PSK2.3) 

PSIOB{2,3) 


error option fla^s 

constant far computing tracker noise standard deviation 
tracker misailnement vectors 
tracker scale factor nonllnearltles 
deflection output quantization level 


tracking flags 

Ideal star tracker deflection angles 
simulated star tracker angles 



FIGURE 4.7-88. STAR TRACKER REFERENCE MODULE MATH FLOW 


MDC El 201 
30 December 1974 



XSV3 -^/vsfc/M/oo sz>ij.nvr,/o£jj.sv svmnoa TisiivivGCJOiM 






STRAKR-2 


(CONTINUED) 


MDC El 201 
30 December 1974 














J.SV3 - sofj.n^njottJLS^ swissruoa "iri'a/y/voaos^ 


CALL TRACK (TSTR(1,ID). STCL(l.lD), 
CFOy, NSTAR. K£. MAUTOP(lD), 
PSICOM(I.ID), PSIMAX(IO), TSI{1,1,10), 
lUW. IDAY, FOV. ITRAC(ID)) 




CALL .jE/.RCll (STCLO.ID), CFOV, NSTAR, 
KE, tUulQPUD), PlilCOHU.ID). 
P5i|.'A((10), TSUI .l.IQ). UIJ, IDAY, 
FOV, rsTRO.lD), TTKAC(ID)) 


CALL OBSGEH (TSTRO.ID), 
TSTR(A.ID). ID. TSlO.l.ID), 
T. PSl(l.IO), PSIOB(l.lD)) 


ro 

cn 

CD 



1 No 

au DBSGEH [TSlRd.lO), TSTR(4.1D). 
10, TSI'l.l.lD), T. PSI(I.IO). 


PSmUl.lD)) 


110 * ? 

ITRAC(2) “ ITRAC(l) 


PRINT: “JIO 

^TRAC\ 

VISIBLE STAR 

-«<r (ID) » 1 > 


IDth ST" 


i 


■^ES 



lSTR(4,IDy. ID, TSlO.l.lD), 
T. PSI{I,1D), PS10B(1,1D)) 



STIUKR-A 


STRA JI.3 


FIGURE 4.7-38. (CONTINUED) 
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--4 

ro 

LTl 



Sw!.n3uttDii Kii-i t", j, 1 


f^irpose: To computo the shift In the »p;srert line of it?a to • vttr to ».t>w^ 

of tha observing vehicle etoot me sun. 


Inouts: 

T 

U(3) 

Output: 

USTAB(3) 


elapsed time from the clock epoch 
geometrical line of sight to star 

llne-of-slght vector corrected for aberration 


STRAW!-? 
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FIGURE 4.7-88 


/ 

X,. 


Si'broLiit* t^oc (r, tv, ictv. cfc<, !:*i. !t .; 

Purposa: To test F0\ Irterference by the e»rlh, ijn, or 
Inputs: 

V(3) target line of sight or ST centerline 

IV{3,3) unit vectors from the vehicle to the earth, sun, or noon 

THETA(3) , effective half-angles of the earth, sun, and moon sub- 

tended at the vehicle 

CfQV half-cone angle of the circular fleld-of-vlew encompass- 

ing the ST search raster pattern 

iOAY ■ orbital phase (day/n!ght) flag 

tEARTH earth only flag 


Output: 

IIIOCC 


Identity of the occulting body 
IDOCC • 1: earth 

> 2: sun 

• 3: moon 


r \ 

(CONTINUED) 
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Subroutine OSSCEN (SI, VMAG. ITHIJl, 7SI. T. J-SI. PSIOB) 
Purpose; To conpute sinxileted star tracker deflection ancles 


1 

ro 

cr» 


Inputs: 

Sl(3) 

V,MAG 

ITBKR 

TS1(3.3) 

T 

lABERR 
IKQISE 
imSAL 
ISCflLE 
IQUAHT 

CNOIS 
PH1(3,3) 
SF[3,2,3) 
QUA, ‘IT 

Outputs: 

PS! (2) 
PSI0D{2) 


geometrical line tf sight to the target 
visual magnitude of target 
identity of trackcl' 

star tracker-to-Ei;l transformation matrix 
elapsed time slnci: Ihe dock epoch 


error option flagu 
(Input via coition. 


constant for computing tracker noise standard deviation 
(via COICIOII) 

tracker misallnemml. vectors 
(via caiHon) 

tracker scale factor nonllnearltles 
(via COIltlOII) 

deflection output gtiantlaatloii level 
(via COHMOH) 


Ideal star tracker deflection angles 
simulated star tri.cter angles 



OBSGEII-1 


FIGURE 4.7-88 . (CONTINUED) 


MDC El 201 
30 December 1974 







JLSV3 • sotj.nxrrvoMJiS'is' swonoa ~3~J3iMi\JoaofAi 


I 


VES XO'irs/i 7 
\ ' I) / 


COMPUTE 2 ORTMOSOKAL AXES, 

\n AHO n, Of Tf OIIOJIAL TO Sll: 

UY^ • [ 0 1 0 ] 

^ • UNIT {in Ji ;ift) 

V2 • SR X VI 


[ COMPUTE STAR TRACKER AHCLES 1 

FROM SEflSEO STAR VECTOR: 


PSIOB(I) • ARCTAH 

ss) 


P3I0B(2) • ARCTAH 

im' 



FORM ERROR VECTOR AHO ROTAfE STAR VECTOR: 

ERRVEC -'RilOlsq) * V1_ + RV0IS(2) * _V2 + PHldl 

ERR - I ERRVEC [ 

ERRVEC 
— “ ERR 

■ 0 -UE{3) UE(2)1 

[UX] » UE(3) 0 -UE{1) 

-UE(2) UE(1). 0 J 

SR ■ |[I] > (1 - C0S(ERfl|)[U<]^ + SII((ERR)[UX]}SR 


MODIFY PSIOB TO 3HCLUDE SCALE FAaOR 
NONUNERITV; 

PSIOB(I) ■ PSIOB(l) + SF0.1.I)*[PSIOB{I)]^ 
+ SF(2,1.I)*[PSI0an)]^ 

+ SF(3.i,I)*[PSI0Bn)]'’ 

PSI0B{2) • PSI0B(2) + SF0.2,I)*[PS1QB(2)]^ 
+ SF(2,2.I)*[PSI0B(2)1^ 

+ SF(3,2,I)»[PSI0B(2)]^ 



ODSGEN-3 - 
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Sibroutine SCREEN (STCL, CFOV, HSTAR, STROAT, HSl 



QUANTIZE PSI03: 


TEUP - WD[PS10Ul). QUANT] 
PSlOB(l) • PS103(1) - TEM» 
TEMP • M0B[PSi;03(2). QUANT] 
PSIODtZ) • PS10B(2) - TEMP 



■'J 

I 


Piirjios«: To lort out r«vinat1on stars which fall within the circular fieid of 
■view ‘inconpassing the ST search raster pattern 


Inputs: 

STCL(3) 

CfOV 

. NSTAR 

Outputs: 

STRDAT(10,4) 


ST centerline in ECI coordinates 

half-angle of the circular field of view encompassing 
the ST search raster pattern 

number of stars in the star table 


star data {unit vectors and magnitudes) of candidate 
stars 


NS 


number of candidate stars 


I 

I 

1 


OISEE.'M 


FIGURE 4.7-08 . (CONTINUED) 
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i 


tUbro»it1na SEARCH (Sia, CfOV, HSTAR, KE. tWJTOP, 
’Slew, PSIHAX. TS!, UM, lOAY, F0\l, TSTR, ITRAC) 



Purpose: To detect 

Inputs: 

stclO) 

CFOV 

NSTAB 

KE 

MAUI OP 

PS1CCM(2) 

PSIMAX 

TSII3,3) 

UH(?,3) 

!DAV 

FOV 

Outputs; ■ 

TSTI0;4) 

ITIUli: 



scr£|;n-i 




target star for tracking 

star tracker centerline 

half-angle of circular field of view enclosing the 
tracker search raster pattern 

nuinber of stars In the star table 

affective half-angle of the earth 

auto-optics mde flag 

auto-optics deflection cowTands 

raster limit 

ST-tc-ECl transformation matrix 

unit vectors from vehicle to the earth, sun, and anon 
orbital phase (day/nlght) flag 
tracker search raster size 

target star unit vector and magnitude 
tracking flag 


FIGURE 7-88 . (CONTINUED) 
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V ^■ 




I 

ro 

CM 




SEARCH-2 


SEARCII-1 
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i! 


N . , 


Stfcroutln« SE.tCT GSHl, .MIH) 

Pur^joie: Ta jeleci the brightest stir In the- ST field of view 

Inputs: I 

SMAG(HSTR) magnitudes of visible stars , 

NSTR number of visibli:' stars I 

I 

Outputs: 

llIN Index of the brightest star 


. . 

I 

ro 

cn 

cn 



FIGURE 4.7-88. (CONTINUED) 
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Subroutine TRACK (TSTR, STCl.. CFflV. KSTAR, Kli. HAlTOP, 

PSICai, PSUIAK, TSl, Ull. ICtY. FOV, ITIWCy 

Purpose: To test the visibility of the star osing tracked and to search for a 
new target star If the vlslbrily test Is f-alled. 



Iniiuts: 



TSTR{4) 

target star unit vector and mtgnltude 


STCL(3) 

star tracker centerline 


CFOy 

half-angle of circular field of view enclosing the i 

tracker search raster patte'n . 


HSTAR 

number of stars In the star table 


KE 

effective half-angle of the earth 


HAUTOP 

auto-optics mode flag * v ! 


psicai( 2 )- 

auto-optics deflection conmands •_ 


PSIMAK 

raster limit 

• 

TSI(3,3)’ 

1 

ST-to-ECl transformation matrix - • 

1 

ro 

UW(3,3) 

Unit vectors from vehicle to the earthi sun. and moon 

CTi 

CTi 

JDAY 

orbital phase (day/nlght) flag * 


FOV 

tracker search raiter slaa . 


Outputs; 



TSTR (4) 

target star unit vector and magnitude . 


iTRAc : 

tracking flag l 


I 

i 

I 


1 

( 

I 


FIGURE 4.7-88. 
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SuSroutlne VECELB <R. T. DEL. RB, KATI, RE, UW. THETA. KE, KRE, IDAY) 

Purpose: To compute vehicle-to-celestlal bod^ (the earth, sun, end moon) unit 
.vectors, half-angles of celestial bodies, snd orbital phase. 


--4 

1 

ro 

CO 


fnputs; 

8(3) 

T 

DEL{3) 

RB(3) 

KATII 

RE 

Outputs: 

UW(3.3) 

TIIETA(3) 

KE 

KRE 

lOAY 


vehicle positton ucctor 

elapsed time froif the clock epoch 

angular factors to account for celestial body brightness 

average radvf of the earth, sun, and noon 

angular factor for the earth's atmosphere 

effective radius cf the earth for sun occuUation 

1 

■veh1cle-to-ceTest1a1 body unit vectors 

effective half-anfles of cElestial bodies Including 
glow 

effective lialf-aiiples of the earth including the 
atmosphere 

effective half-ancle of the earth for sun occuUation 
day phase flag 


ft 

h 

(ft 

S 



VCELB-1 
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FIGURE 4.7-88 


Subroutine VISIB (V, KE, HAUTO?, PSICOH, PSIMAX, TSI, IN, IDAY, ISOCC) 

Purpose: fj test the visibility of a target within a specified raster area 

.(searcs or auto-optics). 

Inputs: 

V(3) 

KE 

HAUTOP 
PSIC0N(2) 

PSrtlAX 
TSI(3,3) 

UW(3,3) 
iOAV 


visibility flag 

lOOCC * 0: target visible 

• 1: earth occuUatlon 

• 4: target outside specified raster area 


(CONTINUED) 


Outputs: 

IDOCC 


target line of sight In ECI 

effective half-angle of the earth subtended at the 
vehicle 

auto-optics mode flag 
auto-optics angular commands 
raster limit 

ST-to-ECI transformation matrix 

unit vectors from vehicle to the earth, sun. and moon 

orbital phase (day/nlght) flag 
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START ) 


j*-' - ■' 



» 

1 

rj 

<T> 

eD 







VlSlfl-1 j VISIB-2 

I . 

I 
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I and rates; later, realistic vehicle dynamics can be provided by an EOM 

1 '■ J : • .iulo. Hardware data {error sources and scan-rate parameters) and a star 

I f.vjtalog complete the ST validation data base requirements. 


j 

5 

! 

1 

! 

I 
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4‘^7.5.1.5 Aero-Flight Control System (PCS) - The FCS, which is used during approach 
and landing, TAEM, and part of entry, is described in Ref. 46 . This is a "fly by 
wire" system, with data handling and control functions performed by the flight soft- 
ware resident in redundant digital computers. The backup FCS is another digital 
computer (with identical CPU hardware and simplified software). 

Of the flight hardware involved in flight control, most modules — e.g., IMU, 
rate gyros, TACAN receivers -- are covered in other sections of this report. The 
flight hardware modules which we have assigned exclu\'ively to FCS are: 

• Aerosurface Actuator Interface Units 

• Air Data System ' 

4. 7. 5. 1.5.1 Aerosurface Actuator Interface Units (ASAIU's) - These are rather 
simple hardware units, with very limited simulation and validation requirements. 
Therefore, the discussion which follows is rather brief. Additional information 
relating to somewhat similar hardware units (PSIU's) may be found in Section 
4.7. 5. 1.3. 

ASAIU Description 

Like the PSIU's described in Section 4. 7. 5. 1,3, the ASAIU's provide interfacing 
between controlled/ hardware units (in this case, aerosurface actuators) and manual 
controls and flight computers, performing signal processing and checkout functions. 
When the control channels and aerosurface actuators are performing properly, the 
primary function of the ASAIU's is formatting and conversion of signals from and to 
the flight computers, to implement closed-loop vehicle control. 

The ASAIU's also implement "voting" of redundant commands and feedback signals, 
enabling command equalization as well as malfunction detection, isolation, switch- 
out and annunciation. Switchout of a malfunctioning actuator can be overridden by 
crew command. In the case of the quad-redundant hydraulic actuators used on the 
■fast-response surfaces -- elevens and rudder/speedbrake — these monitoring functions 
are implemented with rather complex and as yet ill-defined algorithms involving 
position feedbacks and hydraulic pressures sensed at multiple ports. For the dual- 
redundant hydraulic actuators used on the body flap, the implementation is similar, 
albeit simpler, 

4.7-271 
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Specifications and study reports defining command/response word formats, 
malfunction-handling algorithms, etc., have not yet been identified. 

ASAIU Module Description and Performance Parameters 

Again like the PSIU's, it seems reasonable to assume that the functions of 
the ASAIU's will be "embedded" in the associated actuator simulation modules. This 
is particularly true in view of the fact that the level of detail of actuator 
simulation will probably not be adequate to directly simulate the equalization and 
monitoring functions in high fidelity. That is, the actuators will be simulated 
basically as transfer functions with appropriate nonlinearities (see Section 
4. 7. 1,4); thus the physical quantities used in the monitoring process will simply 
not exist in the simulation. It may be possible to translate these physical 
parameters into their equivalent transfer-function variables. More likely, however, 
the simulation module will simply talkback inserted malfunctions. 
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4. 7. 5. 1.5. 2 Air Data System (ADS) -- The air data system is used to sense the 
velocity and orientation of the Orbiter relative wind, providing data used for 
aeroflight control. 

ADS System Description 

Figure 4.7-89 shows an overview of the air data system and its hardware 
interfaces. The total system consists of: a set of dual -redundant probes, with 

associated deploy/retract mechanisms and heaters; dual/dual -redundant air data 
transducer assemblies (ADTA); and electronics interfaces. The probes are deployed 
during the transition phase of entry, and air data outputs are used from then 
until landing. (See Refs. 20 , 48 . ) 

Figure 4.7-90 is an expansion of an ADTA, identifying the individual 
transducers, calibration memories, and miscellaneous electronics. The ADTA has 
self -test and operate modes. Self-test data is evaluated by the GN&C computers 
to determine the status of each ADTA. In the operate mode, the ADTA responds to 
probe inputs to generate static pressure, total pressure, total temperature and 
differential pressure outputs. These are processed by the GN&C computer to 
compute airspeed, angles of attack, etc. 

ADS Simulation Module Description and Performance Parameters 

We assume that the ADS simulation module will provide a high-fidelitysimu- 
latioTr of ADTA self-test and operate mode outputs and a time-delay simulation of 
probe deployment and retraction, will allow for various internal failure modes , 
and will respond properly to variations in simulated bus voltages. 

Figure 4.7-91 is an overview of ADS simulation module interfaces. Table 
4.7-25 provides an ADS module parameter list. 

ADS Reference Data Sources and Data Formats 

The ADS reference module discussed in this section provides a simulation of 
the nominal operation of the air data probes and the ADTA, and sets discretes for 
probe deploy/retract and heaters without any detail simulation. The individual 
hardv/are elements of the air data system are not modelled in this reference module. 


4.7-273 

A/yCDOWA/e'JL.z. DcnjGt-ns /iSTfrcuvAUTics - emst 




































MDC El 201 
30 December 1974 


TADLE 4.7-25 AIR DATA SYSTEM MODULE PARAMETER LIST 


SYMBOL 

DEFINITION 

TYPE^ 

- - 

Command for self- test mode or operation mode 

I 

To- Pq 

Ambient air temperature and pressure 

I 

M 

Mach number 

I 

- (2 . Vg 

Angle-of-attack angle-of-sideslip and airspeed 

I 


ADTA self- test values for P^^-j P^^. > T^^,AP., and 
mode/status 

DB 

T 

Temperature sensor recovery factor 

DB 

Y 

Specific heat ratio for air 

DB 

^so’ *^to’ "^to 

Ideal probe values of static pressure, total 
pressure and total temperature 

P 

AP 

Ideal probe differential pressure (function of 
•vehicle aerodynamics) 

P 

^Tto 

Changes in, ideal probe values due to vehicle 
dynamics 

P 

^Psl- "'’ti- 

ETti.e^Pi 

ADTA hardware errors 

P 

P . 

SI 

Indicated static pressure (divided into most 
significant and least significant words) 

CP 

^ti 

Indicated total pressure 

CP 

Tti 

Indicated total temperature 

CP 

AP, 

Indicated pressure differential 

CP 

- - 

ADTA Operational Mode and Status flag 

0 

- - 

Power-on discrete from ADTA ' 

0 

- - 

Probe heater status discrete 

0 

- - 

Probe deploy/ retract status discrete 

0 


\egEND: I = input 


DB = data base input 
0 = output 

P = performance parameter 
CP = critical performance parameter 
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ENVIRONMENT 

MODULE 


temperature, pressures, 
mach number, angles of 
attack and sideslip 
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ADS 

electrical 

pov/er 

EPS 

MODULE 


MODULE 


depl oy/ retract , 
self-test, and 
operate commands 


self-test data 
and status 
discretes 


pressure, 
temperature and 
different! al 
pressure data 


GN&C 

COMPUTERS 


FIGURE 4.7-91. ADS MODULE INTERFACES 


EEPRODUCarLITY OP 'IfiP 
miQlNAL PAGP IS IPOOR 
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;Hnj of hardware errors is to be accomplished by means of "generalized 
■\,!wtions" (table lookups, polynomials, etc.)> based upon hardware test data. 
The math flow for module CKADS, as shown in Fig. 4,7-38 , is initialized 
st'i constant parameters from the data base, and driven by checkpoint data 
; r .vidnd either by an on-line driver routine or accessed from a predefined data 
It has two basic paths: one for the self- test mode, and one for the 

-.M-tite mode. 

S> ‘lf-Test Mode - The ADS reference module simulates the ADTA self -test mode, 
normally initiated by the GN&C computer. Generation of reference verification 
•data for the self-test mode is accomplished by simply setting the ADTA output 
to the values expected by the GN&C computer for a nominal status. 


Operate Mode - The operate mode simulates the functional situation in which 
dynamic sensor data is supplied to the GN&C computer for processing. Generation 
of the ADTA output during this mode is accomplished by exercising Equations 
(1) through (9) of Figure 4.7-92, discussed in the following paragraph. 


Equations (10), (IT), and (12) provide the ideal values for total temperature 
(T^), static pressure (P^), and total pressure (P.{.), as measured by the air 
data probes. The equations presented are developed, using fundamental dynamics 
and thermodynamics of air, in Reference 47., 


Tt - To (ro +• ^ 
f? =Po 


p, 


, 2 . .2 


0-O+7) M' 
4TM^-2(7-1.0) 


1 / for 1 
'y-l 

for M ^ 1 


no) 

ni) 

( 12 ) 


Mote that the probes are assumed to be located in the free stream ahead of any 
shock wave, and the temperature sensor is assumed to measure full adiabatic 
temperature increase within the recovery factor Equations (10), (11), and 
(12) are for airflow axial along the probes, and will not provide the correct 
mGQsureinent v;hen the incident flow is not axial. They are typical calibration 
equations; by addition of correction terms dependent on vehicle parameters such 
as angle of attack, angle of sideslip, and airspeed, representative ideal values 
ior P^, and T^ can be achieved for all vehicle states. The additive 

REPRODUCIBILITY OF THE 
4.7-277 ORIGINAL PAGE IS POOR 
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FIGURE 4.7-92 AIR DATA SYSTEM REFERENCE DATA MODULE 
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..*-;ctions indicated by S in Equations (1), (2), and (3) of Figure 4.7-92 
,»ro derived from test data. 

The differential pressure parameter ( A P), is a function of vehicle dynamics 
.ind airflow around the probe, with the functional form heavily dependent on probe 
design and location on the vehicle. For the reference module, the ideal Ap 
is modeled using design and test data, (The flight software will contain an 
algorithm for converting A P,| into sensed angles of attack; this algorithm will 
be essentially the inverse of the reference module algorithm.) 

The ideal inputs to the^ADTA thus obtained are then degraded due to non-ideal 
operation of the hardware. Typically, hardware errors can be divided into two 
classes: those which are compensated for in the software accepting the data, 

and those not compensated for and thereby introduced into the system. Since the 
GN&C flight software will likely perform compensation for certain hardware 
characteristics , both types should be introduced to the ideal data. The reference 
module discussed here provides all hardware errors as additive terms (£) to the 
ideal values. The hardware error functions are determined using design and 
test data. 

k 

The final output performance parameter, the mode/status flag, is assigned 
the appropriate value for nominal system operation. Since operate and self-test 
values may differ, the parameter appears in both paths of Figure 4.7-92. 

ADS Module Validation Methods and Check Cases 

ADS module validation is performed by driving both the simulation module and 
the reference module with corresponding input data. Check-case data required 
by the reference module are as follov/s: 

• Power-off Data Check - The power off checkpoint is to verify that the 
power-off condition for the ADTA results in proper power-off output data. 

This single check point need not be built in to the reference module. 
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0 Self-Test Data Check - The self- test check point is to verify the ADTA 
output in response to self- test commands. The reference output for 
this check point will consist of stored test words identical to those 
existing in the GN&C computer for verification of the ADTA status. The 
reference module input needs only the mode parameter to specify the 
self-test condition. 

• Operate Data Check - This check consists of a series of check points 
chosen to verify the system output over its normal range of use. The 
reference data for this check is generated by a parametric variation of 
the inputs (P, T, , etc.) used in the calculation of the performance 

parameters. The appropriate parameter variations are selected based on 
performance specifications for the air data system and the vehicle. 

The simulation module, being more directly hardware-oriented, will require 
additional input data (see Table 4,7-25) for proper operation. 

In addition to the discrete check points, the appropriate input values to the 
reference module may be stored along with resulting simulation module outputs 
from a simulation run. The verification executor can then access the data to- 
drive the reference module and generate data for comparison with the stored 
simulation data. However, care should be used in. utilizing this option. Since 
the reference module does not simulate all the air data system hardware-related 
effects (e.g., malfunctions, voltage and temperature variations), the simulation 
data must be in the nominal operational regime to be directly comparable. 

For nominal operation, reference/simulation data agreement should be within 
a few percent for moderate mach numbers and angles of attack, during steady 
flight. Discrepancies of ten percent or greater would not be unreasonable at 
high mach numbers or high angles of attack, during turbulence or high-g maneuvers. 

ADS Data Base Impact 

The parameters and functions indicated on Figure 4.7-92 as input through fhe 
data base must be available to the reference module from mass storage. Table 
4*7-26 presents the individual data base items, with an indication of the data 
source and added comments on the type of data. 

4.7-200 

rt^COO/V/VE'fi.i. DG'tJGL^S ASri^OfVASJTSCS - EAST 


MDC El 201 
30 December 1974 


TABLE 4.7-26 REFERENCE MODULE DATA BASE SOURCh LIST 


ITEM 

SOURCE 

‘..*1 f-tost 

Air Data Subsystem 

V '.lues 

Vendor 


Reference Simulation 
Standards 


Air Data Subsystem 
Vendor 

«Psi,tPti 

«Tti,*AP.j 

Air Data Subsystem 

Vendor 

iPsi-lPj-i 

Vehicle Vendor 


COMMENT 

Nominal Values indicating a "60" status 

Assigned Reference Value (e.g., 1.40 
for air) 

From Design or Test Data 

Predicted static error data from design 
studies 

From Wind Tunnel or Flight Test Data 


The complicated nature of the airflow functions 5P„-, «SP. and AP warrants the 

SI ul 

use of flight test data when available. Wind tunnel data or predicted values will 
in general provide only trend data, but should be used until flight test data 
becomes available. However initially obtained, the airflow functions should be 
updated upon the availability of flight test data to ensure a valid simulation. 

For all test data items, it is important that configuration control procedures 
be utilized to maintain up-to-date data base information. Reference module data 
base updates would result from system modifications and from the availability of 
more reliable data through program advances. When such updates are incorporated 
into the reference module, a reverification of the simulator air date module 
would be undert^rfeen. If it is found that the simulator module is no longer valid 
with respect to the updated data, simulator management would then be informed. 
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4. 7. 5.2 Communications and Tracking (C&t) Subsystem 

The C&T subsystem provides capabilities for transmission of information and/or 
commands and determination of relative state variables between the Orbiter and 
(a) ground-based facilities (see Section 4. 3. 2.1) and (b) payloads and rendezvous 
targets (see Section 4. 3. 2. 2). Orbiter/payl oad communication and tracking is 
performed during the on-orbit mission phase; Orbi ter/ground communication and 
tracking may be performed during any mission phase - except for a short period of 
communications "blackout" during entry. 

C&T Subsystem Description 

The block diagram of Figure 4.7-93 (Ref. 36 ) provides an overview of the 
C&T subsystem. This subsystem includes several types of components: 

• receivers, transmitters and transponders 
§ record/playback equipment 

» data handling and distribution equipment (e.g., signal processors, coders, 
data interleavers, switching systems) 

§ antennas 

• manual control and display interfaces 

• flight computer interfaces . 

Component specifications (Refs. 49 through 58) provide detailed information 
relating to many of these components; specifications for other components have not 
yet been identified. 

C &T Module Description and Performance Parameters 

The C&T subsystem simulation module will consist of a number of submodules. 

Each such submodule will provide the operational modes and performance parameters 
of one of the basic hardware components of the C&T subsystem, model appropriate 
hardware errors, and allow for the insertion of simulated malfunctions. 

Table 4.7-27 gives a list of performance parameters for the C&T simulation module. 

Figure 4,7-94 shows the C&T module interfaces. Definition of the interface 
with the artificial environment module requires some assumptions about the soft- 
ware design. We have assumed that, for maximum module independence, each of these 
modules will require a minimum, of information about the other. For example, the 
ground nav/comm module will compute the line-of-sight (LOS) to the Orbiter (as 
seen from the ground), in its own axis. set, and use the ground-antenna gain pattern 
to compute its transmitted signal strength along that LOS. The onboard C&T 
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TABLE 4.7-27. COMMUNICATIONS AND TRACKING SIMULATION MODULE PARAMETERS 


SYMBOL 

DESCRIPTION 

TYPE® 

^SE 

Ground station coordinates (earth-fixed axes) 

I 


Ground station identification tags 

I 


Ground station transmitting frequencies 

I 


Line-of-sight contact flags 

1 

1 

Orbiter position and velocity (ECI axes) 

I 

6r, 6v 

Target relative position and velocity (ECI or orbital axes) 

I 


Orbiter attitude . 

I 

h 

Orbiter altitude (above local terrain) 

I 


Station range and range rate 

I 

^ZS’ ^S 

Station azimuth, elevation 

I 

*"t^ '^t 

Target range and range rate 

I 

^ST’% 

Transmitted’ signal strength from ground station, target 

I 


Incoming and outgoing data/command streams 

I 


Onboard antenna gain, patterns 

DB 

^T 

Line-of-sight to station, target (body axes) 

P 

^SR’^TR 

Received signal strength from station, target 

P 

^T 

Transmitted signal strength to ground station or, target 

P 

Dc 

Measured doppler counts 

CP 

^a 

Measured radar altitude 

CP 


Measured range to station, target 

CP 

^ZS’^'S 

Measured station- referenced azimuth, elevation 

CP 


Measured target angle and angular rate 

CP 


®TYPE: I = input 

DB - data base input 

P = performance parameter 

CP = critical performance parameter 
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module will compute the LOS to the ground antenna (as seen from "he Orbiter), in 
its body-axis set, and then use the onboard ant*'^nna gain pattern and the transmitted 
signal strength to compute its received signal strength along that LOS. Thus, 
each module will need to know its own antenna patterns, but neither module will 
need to know the other’s antenna patterns. In addition, each module will need 
to output various flags and tags to inform the other which ground facilities 
are active and in view, which onboard subsystems are active, etc. 

The Shuttle Mission Simulator, which is sometimes used in integrated operations 
with Mission Control, must provide the capability to provide a simulated telemetry 
stream — realtime and/or recorder data-dump. This will require the C&T module to 
have telemetry simulation modes, in which properly- formatted mass-storage files 
are generated during simulator operationa, then dumped over an appropriate communi- 
cation channel upon commands received via the Mission Control communication link. 

C&T Reference Data Sources and Data Formats 

Figure 4.7-95 shows the math flow and variable definition for a module 
(CHKCMT) to generate reference data for validation of the C&T simulation module. 

The equations shown in this figure are derived in Ref. 59 . Geometry calculations 
necessary to compute range, range rate, bearing, etc, are performed in terms of 
coordinate systems as shown in Figure 4.7-96 ; (see Ref. 60). in some cases, 
complete information required for equation development is not yet available, and 
computations are shown as generalized functions. These generalized functions 
may be implemented in computational form, or via table lookup, polynomial fit, 
etc., as the required data becomes available during the course of the Shuttle 
program. Status discretes and other secondary parameters are assumed set to 
their nominal operational values, and are not represented on the math flow. 

Mote that this reference module is designed for initial validation of the C&T 
module, and includes computations which will actually be performed by the artificial 
environment module. A simpler reference module will be appropriate for integrated 
validation of the C&T and artificial environment modules.. 

Command parameters (e.g., switching, data-dump) normally generated by manual 
controls, flight computers, or ground command must be provided by an external 
driver and/or manual data input to the reference module, in a format matching their 
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LEGEND 


SYMBOL 

DEFINITION 

i 

Pass number 

'I’si 

Ground station .latitude 

^si 

Ground station longitude 

hsi 

Ground station altitude 

N 

Number of Ground stations to be verified . 

ae 

Earth semimajor axis 

ee 

Earth eccentricity 

ut 

Angle between vernal equinox and Greenwich Meridian (Note 
t depends on time of reference frame Initialization) 

03 

Earth rotation rate 

fl 

Function relating Doppler counts to range rate (Ground 
Transmission) 

f2 

Function relating antenna transmitted signal strength to 
line of sight (vehicle to ground station) 

f3 

Function relating antenna received signal strength to line 
of sight (ground station to vehicle) 

f4 

Function relating antenna transmitted signal strength 
to line of sight (vehicle to TORS) 

f5 

Function relating antenna received signaT strength to 
line of sight (TDRS to vehicle) 


FIGURE- 4.7-95 (CONCLUDED) , 
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intended operational format In the eventual integrated-simulator environment. A 
pseudo-data stream should also be provided to verify proper transfer of telemetry 
data. 


Note that, to simplify the reference module logic, values for azimuth, 
elevation, range and range rate are computed for all ground station types, even 
though not needed in every case; e.g., elevation angle and range rate are not used 
for TACAN stations. 

C&T Validation Methods and Check Cases 

In accordance with the basic validation software structure described in 
Section 5.1, Figure 4.7-97 provides the math flow for a checkpoint-generation 
routine to be used in C&T module validation. This routine will provide, in 
addition to discretes for selection of operational modes, ground stations and 
TORS satellites, the following vehicle-dynamics-related data: 

X = (X,Y,Z,X,Y,Z) = shuttle state vector 

• • • 

= (X^,Y.(.,Z^,X^,Y^ Z^) = rendezvous-target state vector 

B =3X3 coordinate transformation matrix 

T = universal time 

The logic of this driver routine provides for exercising the linkage between 
the Orbiter and every ground facility, as well 'as varying the relative position and 
velocity over the entire range of operational interest. For initial validation, 
synthetic state vectors will be used. Later, when a vehicle dynamics module becomes 
available, integrated validation will make use of realistic trajectories which 
pass into and through the regions of ground-station and payload contact. 

C&T Validation Data Base Impact 

The data base contributions for C&T module validation will include the 
reference module, the checkpoint-generation routine, ground-station tables, 
antenna-pattern functions or tables, and temporary files of checkpoint inputs and 
outputs. 

The reference module and checkpoint-generation module are both fairly simple, 
and will impose little storage load. The ground-station table will may be fairly 
extensive (dozens or hundreds of stations, depending upon Shuttle operational 
rules), but will be common to the simulator data base rather than in addition to 
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C/x / H 


Xl - Through the Vernal Equino'x of Reference 

Yz - 90® East in the Equatorial plane 

- through the North Pole 

Xe - Through the Greenwich Meridian 

Ye - 90° East in the Equatorial plane , 

2e “ Through the North Pole 

XL “ East through the station location in the Earth tangential plane 
Yl - North through the station location in the Earth tangential plane 
2-L - Up through the station location along the geodetic vertical 

^ '1.7-QG COORDINATE SYSTEMS FOR COMMUNICATIONS AND TRACKING MODULE. 
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it. The antenna-pattern data, if maintained in tabular rather tnan functional 
form, will also be extensive, but should also be common to the simulator. The 
extent of the checkpoint files will vary with the resolution desired for 
comparison plots, and in any event, these files need not be maintained after 
initial validation is completed. Overall, the data base impact for C&T module 
validation should be minor. 
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4. 7. 5. 3 Controls and Displays (C&D) 

The controls and displays group includes subsystems and components involved in 
the presentation of information to the flight crew and flight crew control of the 
Shuttle vehicle and its various onboard systems. It also includes the Master 
Events Controller (MEC), which transfers discrete commands from the flight computer 
to various pyrotechnic devices. 

Controls and displays will be discussed in four categories: timers (including 

the MEC), artificial feel system, miscellaneous display interfaces, and 
miscellaneous control interfaces. Flight-computer CRT/keyboard units are excluded 
from this discussion, on the assumption that they will be implemented using flight 
hardware on the simulators of interest. 

This discussion will be brief, since C&D software requirements are minor, and 
much of their validation will be done in an integrated rather than isolated-module 
configuration; 

C&D Subsystem Description 

Timers and MEC - This category includes the Master Timing Unit (MTU), the event 
timer, and the MEC. 

The MTU (Ref. 61 ), based on a crystal-controlled oscillator, provides 
(a) stable frequency outputs for use by various Orbiter subsystems and payloads, 
and (b) serial time code outputs for subsystems including computers, data 
acquisition systems, recorders, displays and attached payloads. It includes 
separate time accumulators for Greenwich Mean Time and Mission Elapsed Time, 
which can be set or updated by external control.- - 

The Event Timer (Ref. 62 ) is used by the crew in execution of maneuvers and 
other onboard procedures. It accepts and counts timing pulses from the MTU (or a 
backup internal source), and generates a numeric display. Operational modes are 
count-up, count-down, reset, preset, and override. 

The MEC (Ref. 63 ) recognizes two types of discrete commands output by the 
flight computer: critical and non-critical . Critical command words must be 
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transmitted by all four computers to be acted upon; non-critical v-;ords may be 
received from any individual flight computer. Command words are then decoded and 
addressed to the proper pyro initiator controller (PIC), to perform such actions 
as SRB initiation, SRB or ME separation, etc. 


Artificial Feel System - The artificial feel used on Orbiter manual controls 
consists of simple spring resistance and no software input is required. 

Miscellaneous Display Interfaces - The Orbiter crew station panels include a 
great number of displays, some of which are described in Refs. 64 - 66 . These 
displays provide visual and/or aural information of a discrete (events, anomalies) 
or continuous nature (range, altitude, air-speed, etc.) to the crew. Some of this 
information comes directly from onboard sensors, some is generated by flight 
computers. In some cases, the display interface simply buffers and formats the 
raw data; in other cases, software compensation for sensor and display calibration 
is provided. 


The caution and warning (C&W) status display incorporates crew-settable switches 
to select channels, change alarm limits, suppress alarm indications, etc. 


Miscellaneous Control Interfaces - Orbiter crew station panels also incorporate a 
number of controls -- hand controllers, switches, circuit breakers, etc. These 
controls enable the crew to input discrete (e.g., arm drag chute) and continuous 
(e.g., aerosurface, thruster) commands to control the vehicle. The control inter- 
face hardware and software merely buffers and decodes these control inputs for use 
by the flight computer. 


C&D Module Description and Performance Parameters 


Timers and MEC - Timer functions will be simulated using the basic simulator central 
clock (either within the host computer or external hardware) as a timing source. 

The event timer will require a simple software module, which will accept mode-select 
commands from the crew panel. The MEC software module will just provide delayed- 
time talkback of non-critical discretes; its method of voting critical discretes 
will depend upon how flight- computer redundancy is implemented in the various 
simulators. 
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Miscellaneous Display Interfaces - The display interface software will perform 
simple buffering, formatting and scaling of signals from the host computer. Some, 
meters may require compensation-curve processing, based upon periodic calibration 
data. 

The caution and warning status display, if flight hardware, will interface 
directly with the flight computer. If implemented as simulator hardware, it will 
require flight-computer data conversion by means of software in the host and/or 
the FEID. An interface with the aural simulation hardware will also be required to 
generate tone, klaxon and siren outputs, used to indicate mission-critical anomalies. 

Miscellaneous Control Interfaces - The control interface software will simply 
buffer, format and scale discrete and continuous control inputs for the host and/or 
FC/FEID. 

Summary - Figure 4.7-98 depicts the C&D simulation module interfaces. Table 4.7-28 
lists the C&D simulation module parameters. 

C&D Reference Data Sources and Data Formats 

The basic sources of reference data are the specifications of the onboard 
systems, and of the simuTater hardware and software for the particular simulator 
of interest. The simple C&D software modules just perform a simulator-peculiar 
mapping of inputs to outputs -- e.g., discrete input #xxx is delayed for ttt 
seconds and becomes discrete output #yyy; so much controller motion maps into so 
many degrees of aerosurface deflection. 

C&D Validation Methods and Check Cases 

The bulk of the C&D validation is performed on the integrated simulator. 

Prel im'inary validation of discrete-data handling would be done by means of an 
external driver and a command/response "dictionary." Preliminary validation of 
continuous-data handling would be performed by providing sampled inputs over the 
specified range (e.g., the input to a particular meter), generating a data plot 
to be compared to the meter calibration curve. 
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TABLE 4 . 7 - 28 . CONTROL AND DISPLAY MODULE PARAr.ETERS 


DESCRIPTION 

TYPE^ 

Hand-controller and rudder pedal deflections 

I 

Manual switch actions 

I 

Flight computer discretes 

I 

Flight computer continuous data 

I 

Avionics data: MSBLS, TACAN, IMU gimbals, etc. 

I 

Aerodynamic and runway velocities 

I 

Sensor and instrument scaling and calibration data 

DB 

Aerosurface deflection commands (manual) 

P 

Avionics mode and channel -select commands 

P 

Thrust commands (manual) 

P 

Displayed times: GMT, MET, event 

P 

Display discretes: C&W, channel set, etc. 

P 

Instrument drive signals 

P 

C&W panel settings; inhibits, limits, etc. 

P 

Discrete talkbacks 

P 


^TYPE - I = input 

DB = data base input 
P = performance parameter 
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C&D Validation Data Base Impact 

Very little on-line storage is required for validation of the C&O module, 
which requires no reference module as such. The on-line data base will consist of 
some short command/response dictionaries, a few calibration curves, and a simple 
external driver module. 
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4. 7. 5. 4 Operational Instrumentation (01) 

The 01 subsystem provides the telemetry processing and caution and warning 
(C&W) functions on the Shuttle Orbiter. The telemetry processing function 
consists of data buffering, scaling and formatting, and control of onboard recording, 
recorder dumping, and real-time telemetry to the ground network. The caution and 
warning function consists of buffering, filtering and gating data, and generating 
display messages in response to detected anomalies. 

These functions are all implemented in flight software in the Orbiter flight 
computers, and will thus require no simulation software in the simulators of 
interest, which will incorporate flight computer hardv/are. In the SMS, which 
simulates most onboard subsystems in high fidelity, 01 implementation will require 
the subsystem simulations to provide realistic values for such performance- 
correlated variables as temperatures, voltages, and various operational discretes -- 
over and above a correct representation of subsystem functions. In the SPS and 
OAS, we expect little pr no implementation of 01 functions, and much-simplified 
representation of most onboard subsystems. 

The telemetry and maintenance recorders are discussed under C&T (Section 
4. 7. 5. 2), and the C&W displays under Controls and Displays (Section 4, 7. 5. 3). 
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4.7. 5.5 Electrical Pov/er Distribution and Control 

The Electrical Power Distribution and Control (EPD&C) subsystem provides the 
means of conditioning and transfer of electrical energy from the fuel cells or 
ground support equipment (GSE) umbilicals to the various systems electrical 
equipment. In addition, the subsystem includes external vehicle illumination. 

This section provides a discussion of the subsystem components, module performance 
parameters, reference data sources, validation methods, and impact to the 
simulation data base. 

EPD&C Subsystem Description 

Figure 4,7-99 is a schematic of the EPD&C subsystem. The means of energy 
transfer is a network of bus bars which are connected by electrical cables, power 
relays, solid state power controllers, fuses, etc. This network of buses includes; 

• 3 main buses 

0 3 essential (critical) control buses 
0 3 forward local buses 
0 3 midsection local buses 
0 3 aft section local buses 
0 3 AC 3-phase buses (powered by 3 inverters) 

The three main buses can be individually interconnected by a tie bar which also 
allows connection of the tie bar to GSE power via the nose-wheel umbilical. The 
three aft local buses can be individually connected to GSE power via the aft GSE 
power umbilical. The three aft local buses can also be connected together via a 
tie bar. The 3-phase AC buses can also be electrically connected by tie bars. 

The illumination system block diagram is presented in Figure 4.7-100. The 
exterior lighting is controlled by manual switching. The lighting includes landing, 
navigational, anti-collision, rendezvous, docking, manipulator, payload and camera 
lights. 

EPD&C Module Description and Performance Parameters 

The Figure4.7-im schematic illustrates the EPD&C module interfaces with the 
other modules and shows the functional elements within the module. The performance 
parameters of the module are listed in Table 4.7-29. The module functional 
elements provide the following calculations: 
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figure 4.7-101. ELECTRICAL POWER DISTRIBUTION AND CONTROL MODULE ELEMENTS AND INTERFACES. 
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TABLE 4.7-20.., EPD&C PERFORMANCE PARAMETERS 


PARAMETER 

TYPE® 

Switch position, selections, etc. 

I 

Equipment operating modes, on/off 

I 

FC electrical outputs - (Norton's equivalent current, admittance) 

I 

GSE electrical outputs - (Norton's equivalent current, admittance) 

I 

Equipment temperatures 

I 

Bus voltages 

CP 

Load voltages 

P 

Bus currents 

CP 

Load currents 

P 

Bus distribution admittances 

P 

Load admittances 

P 

External illumination light operating modes 

P 

Pbwer interruption devices -.total current 

P 

.- overload trip time 

CP 

- device open 

p 


a 


YPE: 


CP = critical parameter 
P = performance parameter 
I = input 
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• Loads - determine the admittance values of each load as functions of 

operating mode, input voltage, and temperature. 

• Control logic - determines enabling/disabling selection logic from the 

control inputs, 
c AC inverter - calculates: 

-- Inverter AC load - determines inverter load-phase as functions 

of AC voltage, mode selected temperatures. 

— Inverter efficiency - this is a function of inverter temperature, 

AC load, and input DC voltage. 

-- Equivalent DC load - a function of inverter efficiency and 

inverter AC load. 

• Distribution resistances - calculates the bus network distribution 

resistances as functions of the control logic, and bus voltages. 

• Distribution voltages and currents - calculates bus and load voltages and 

currents as functions of the fuel cell current/admittance, load 
admittances, and distribution network resistances, 
t Power interruption - sums current through the power interruption devices, 
determines overload conditions, integrates overload time, and sets 
logic indicating power line open. 

• External illumination - determines light operating mode and on/off 

condition from control logic and bus voltages. 


EPD&C Reference Data Sources and Formats 

The component design performance requirements, performance predictions, test 
results, and flight vehicle performance results can be used as reference data 
for direct comparison with simulation results. Reference 31 is specifically 
intended to provide data of this type. Component design requirements are defined 
in the following Rockwell International documents: 


COMPONENT 

Fuses 

Thermal circuit breakers 
Remote control circuit breakers 
Remote power controller 
AC inverters 


SPECIFICATION 

MC451-0010 

MC454-0026 

MC454-0027 

MC450-0017 

MC495-0012 
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Various analysis computer programs are available for use in providing reference 
data. One such program is the Shuttle Electric Power System Analysis Computer 
Program (SEPS) developed by TRW for the consumables analysis section of the Mission 
Planning and Analysis Division (see Ref. 67 ). The subroutines used in the SEPS 
can be easily developed into an adequate reference module. The complete develop- 
ment of a suitable module would be a relatively simple and straightforward task. 

Figure 4.7-102 is a generalized overview of the module operations. 

Figure 4.7-103 provides an equivalent DC circuit for the Shuttle EPD&C. It 
also shows the defining matrices for the circuit assuming the switches are all 
closed and the diodes are forward-biased. The defining matrix equation is: 

[I] = [G] [E] 

where [I] = column matrix for the node input current sources 
[G] = square admittance matrix of the circuit 
[E] = column matrix of the node voltages 

The node voltages can be determined from the following equation: 



E^ = x-node voltage 

] • 

= value of the determinant of [G] . 

= value of the determinant of the matrix resulting by replacing 
the X column of the [G] with [I] 

The analysis of the circuit with all switches open is similiar with the resulting 
matrices being less complex. 

EPD&C Validation Methods and Checkcases 

The methods of Sections 5.1 and 4.2 can be used in validating the EPD&C 
simulation module. A comparison of the parameters listed in Table 4.7-29 and 
bus power, load power, fuel cell input power, fuel cell input watt hours , and 
ampere hours, should provide adequate checks. During the module runs, interface 
drivers will be required to provide the input parameters from the interfacing 
modules. It will also be necessary to provide drivers to initialize or hold 
static the intermodule parameters and conditions. Drivers required are: \ 

® FC electrical outputs 
. B . .Equipment operating mode, etc. 
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FIGURE 4.7-102 



ELECTRIC POWER DISTRIBUTION AMD CONTROL SUBSYSTEM REFERENCE MODULE 
MATH flow. 
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LEGEND: 

Yac. 

^AC 

^ACI 

R/7 

R. 

<^2 

Ex 

Ac 

i 

E 

P 

B 

A-i 

T 


= AC load admittance 
= AC bus voltage 
= logic inputs 

= Sum of AC loads on AC inverter 
= Inverter electrical efficiency 

= Equivalent DC load representing inverter and its AC loads 
= Individual DC load resistances 
= Line resistance from load to bus 
= Sum of bus load admittances 
= Bus interconnection admittance (DC) 

= Bus voltage 

= Value of determinant of the admittance matrix with x-column 
replaced by current matrix 

= Value of the determinant of the admittance matrix 

= Current 

= voltage 

= Power (electrical) 

= Interruption state of power interrupt devices (fuses, circuit 
breakers, etc.) 

= Time increment 

= Temperature 



FIGURE 4.7-102 (CONTINUED) 
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LEGEND: 

^FCA 

^ FLB ^ 
^ FLC ^ 
^FCA 
^FCB > 
%CC 

‘^fcOm 


= Norton's equivalent current sources representing the fuel cell 
A, B, C outputs. 


= Norton's equivalent admittance for the fuel cells A, B, C. 
= Admittances connecting fuel cell output to main buses. 




'A 


I = Equivalent loads on main buses A, B, C including forward local/ 
j middle local/AC bus loads and wiring losses. 


"LAA 

LAB 

\AC 

\A 


’LB 


’LC 


"TA 


’TB 


’TC 


’TMA 

TMB 


TMC 


’AA 


’CA 


= Admittance between main buses and AFT local buses A, B, C. 


= Admittance loads on AFT local buses A, B, C. 




= Admittance between AFT local buses A, B, C and AFT Bus Tie. 


= Admittances between main buses A, B, C and main Bus Tie. 


= Admittance between main buses A, C and essential bus A. , i 

EBPRODtJCiBILITY OF THF 
OBIdCNAL PAGE IS POOR 

FIGURE 4.7-103. (CONTINUED) 
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= • Admittances betv/een main buses A, B and essential bus B. 

= Admittances between main buses A, B and essential bus C. 

== Admittance loads on essential buses A, B, C. 

= Fuel cell output voltages. 

= Fuel cell A, B, C input voltages. 

= Main buses A, B, C Voltages. 

= Main bus tie-bar voltage. 

= AFT local tie-bar voltage. 

= Essential buses A, B, C voltages. 

= AFT local buses A, B, C voltages. 

= Value of the determinant of the G-matrix ([G]) 

= Value of the determinant of the matrix resulting by replacing the 
x-column of the 6-matrix with the I-matrix. 

= Switch. 

FIGURE 4.7-103, (CONTINUED) 
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0 Equipment temperature 

• Control logic (switch positions) 

0 Prelaunch/launch interface - GSE electrical inputs parameters 

The check cases implemented should include step changes in loads, bus switching, 
maximum equipment powered, minimum equipment powered, and expected mission load 
profiles (equipment powered time-line). System checkout or test sequence results 
can be input as check cases with simulation results compared directly to the test 
results. 

EPD&C Data Base Impact 

The EPD&C reference module and drivers are of moderate impact to the simulation 
data base. The majority of the processing subroutines (data comparison, read, 
write, etc.) would be common to all modules requiring validation. The equipment 
power profiles (time-lines) would be required but represent a minor impact. Data 
files would also be required for the input and output data tables. 
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4.7.6 Envlroninental Control /Life Support System 

This section includes the discussion of the Atmosphere Revitalization System; 
the Active Thermal Control System; and the Food, Water, and Waste Management 
System. 


4.7.6. 1 Atmosphere Revitalization System (ARS) 

The ARS includes the Atmosphere Revitalization Pressure Control Subsystem 
(ARPCS), and the ARS Cabin Atmosphere Control Subsystem (ARS-CACS). These two 
subsystems are discussed in the follovnng sections. 
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4 . 7 , 6 . 1 . 1 Atmosphere Revitalization Pressure Control System Desc •'..tion 

The Atmosphere Revitalization Pressure Control Subsystem (ARPCS) provides 
three basic functions for the Shuttle Orbiter. The functions provided are: 

1) N2 and O2 storage (gas) 

2) distribution of gaseous O2 and N2S at proper pressures, to the user 
equipment, system, etc. 

3) ensuring proper O2 and N2 mixture while controlling cabin (crew 
quarters) pressure. 

These functions are accomplished via interconnecting manual valves, solenoid 
valves, pressure regulators, pressure sensors, electronic controls and relief 
valves. This interconnection was determined from schematic VL70-000214 (Reference 
79), specification MC250-0002 (Reference' 71), and a Preliminary Design Review (PDR) 
handout on the Power Reactant Storage and Distribution System. The resulting 
representative plumbing schematic is shown in Figure 4,7-104. and 4.7-105^ Although 
these figures are not totally accurate, they should suffice for the current 
verification study purposes. 

No Supply and Distribution - The N2 gas is stored in 3000 psi bottles containing 
approximately 50 pounds of N2 in each. The primary source of N2 is one (1) 
bottle, with the auxiliary source comprised of three (3) bottles. Additional 
bottles can be carried in the payload area and connected to the system if desired. 
Either the primary, auxiliary, or payload supply can be selected to deliver gas to 
either of the two Np distribution networks. 

The N2 distribution networks are each comprised of various control valves 
(manual and solenoid) and two (2) N2 pressure regulators. A 175 psi outlet 
regulator provides the proper pressure level to the O2/N2 cabin pressure controller 
and to the potable H2O bottle regulators. This 175 psi regulator also provides 
outlet pressure relief (at approximately 200 psi) to prevent over pressurizing the 
downstream distribution network. The pressure relief is vented overboard resulting 
in possible vehicle attitude and rate disturbance torques. Potable water bottle 
regulators maintain pressurization of the three (3) potable water tanks. Pressure 
is regulated 8 to 12 psi above the cabin pressure. This higher pressure ensures 
the expulsion of the water from the tanks. It should be noted that the N2 side 

4.7-319 

/WC:00/V/VS=£.£_ EfQiejGS-AtS jdSTtiCSfV/iUTICS 


y^/vii3V#.4i/oo S'CJ'?jr.ri'»'W4>i?jLsrtr &'s^~to>no£Ji n^f/Vft/oooiy 



MDC E1201 
30 December 



















MDC E1201 
30 December 1974 

Cl uanuery 1 375 


FROM O./N 2 
CONTROC ASSY 
FIGURE 1 a. 


900 PS! O 2 




©AIRLOCK © 

(VOLUME . 
150 ft.2) 


Zap 


MODULE 



OR EVA 

6 


FIGURE 4.7-105. ATMOSPHERE PRESSURE CONTROL, AIRLOCK SUPPORT SUBSYSTEM SCHE^IATIC 
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of the water tanks can be opened to the crew quarters atmosphere via a solenoid 
^ actuated valve. The potable water tanks pressure regulators also provide pressure 
relief for the water tanks. This relief is vented into the crew quarters and 
contributes to the total cabin pressure. 

Op Supply and Distribution - The O2 gas supply has three (3) sources. The primary 
and secondary supplies are from the Cryogenic O2 Systems for the Power Reactants 
Storage and Distribution System (PRSD) which also provide O2 to the fuel cells. 

The Cyrogenic O2 flov/s through restrictor/heat exchangers which provide flow control 
as well as increasing the gas temperature. Oxygen accumulators (surge tanks) act 
as pressure stabilizing and intermediate storage devices. 

An auxiliary O2 gas supply is also available. This is at an initial pressure 
of 3000 psi and must be regulated to approximately 450 psi to prevent over- 
pressurizing the O2 distribution network. The 450 psi regulator also provides 
a distribution system over pressure relief at approximately 1100 psi. This O2 
relief is vented overboard and may generate vehicle attitude and rate disturbance 
torques. 

The O2 distribution networks are each made up of manual valves, solenoid^ 
valves and a pressure regulator. The 100 psi O2 regulator provides the proper 
O2 supply pressure to the O2/N2 cabin pressure controller. High pressure O2 is 
provided to the four (4) emergency O2 outlets in the crew compartment mid section, 
to the four (4) outlets for portable O2 bottle filling, and to the two{2) airlock 
support outlets. 

Mixture and Pressure Control - The cabin O2/N2 mixture control and cabin pressure 
control are provided by cabin pressure regulators, pressure relief valves, O2 partial 
pressure controller, manual valves, and solenoid valves. 

O2 or N2 is selected for cabin make-up gas by the O2/N2 mixture controller. 

The partial pressure of oxygen is sensed by the partial pressure controller and 
electronically opens (for O2 partial pressure 3.45 psia) the N2 supply solenoid 
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v.ilve(s) which allows the 170 psi N2 to flow to the cabin pressure regulator 
inlet. The N2 pressure is greater than the 100 psi O2 which feeds the regulator 
through a check valve. The higher pressure closes the check valve preventing 
O2 from entering the regulator and N2 only is supplied to the cabin. When the 
O2 partial pressure is less than 2.95 psia, the M2 solenoid valve is closed. This 
allows any cabin make-up gas flov/ to be O2. O2 and N2 flow sensors provide output 
to the caution and warning subsystem if flow is excessive. In addition, signals 
are provided to the caution and warning subsystem if the cabin O2 partial pressure 
becomes too high or too low. 

The cabin pressure control is provided by two (2) types of cabin pressure 
regulators, cabin relief pressure valves, and manual valves. The primary cabin 
pressure regulators maintain the cabin pressure at 14,7 psia under normal conditions. 
However, in the event of excess cabin leakage, additional cabin regulators operate 
to maintain the pressure at 8 psia. 

Two cabin overpressure relief valves operate to limit the cabin high pressure 
at 15.5 to 16 psi above the vehicle external pressure. These relief valves can be 
electrically overridden if desired. Two reverse cabin pressure relief valves 
actuate to maintain a maximum 2 psid external pressure above the cabin pressure. 

These reverse pressure relief valves can be manually overridden when desired. The 
venting of these valves can cause body attitude and rate disturbance torques. 

Manually actuated pressure equalization valves used to pressurize and 
depressurize the airlock .compartment. Each of- the thrde •■'(•3) avionics bays is 
continually vented (at a low rate) to. the spacecraft external ambient. This 
venting is required to prevent equipment outgassing products from entering the crew 
compartment. The inlet to each bay is open to the crew compartments via a relief 
valve. This valve maintains the bay pressure at 0 to 0,4 psi below the cabin pressure. 
In the event of a cabin rapid depressurization the same relief valve operates at 
0.6 psi to prevent the bay over-pressurizing with respect to the crew compartment. 

A cabin pressure decay rate detection provides signals to the caution and 
warning subsystem when the cabin pressure is decreasing at an excessive rate. 
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The continued venting of the three avionics bays, and pressurization/ 
depressurization of the airlock may cause vehicle attitude and rates disturbance 
torques. 
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ARP CS Module' Functions ' and Parameters 

Figure4. 7-106 provides an overview of the' ARPCS simulation module functional 
elements and interfaces with other modules. Basically there are four functions 
performed within the module. These functions are: 
e Control logic 
e O2 and storage 

0 O2 and N2 pressure regulation and distribution 
c Cabin pressure control 

Table 4.7-30 provides a detailed listing of the parameters associated with 
the ARPCS module and designation of parameter type. 

The following discussion identifies, in general, the functions performed in 
each element and the factors involved in the calculations. 

Control Logic - The control logic functions are dependent on the position of manual 
valves, solenoid valves, switches, command inputs, bus voltages, etc. The logic 
outputs are used extensively in each of the other functional elements calculations. 
The valve logic can be determined from the plumbing schematic; however, the 
electrical logic is not presently known.’ The total logic will, of necessity, be 
highly dependent on the exact electrical design,- and this study does not warrant 
accurate description of the logic. It is only necessary to recognize its existence, 
and the possibility of many combinations existing. 


O2 and N2 Storage - The O2 and N2 storage functions are the calculation of remaining 
(or available) gas mass, source pressures, temperatures, inlet or outlet mass 
flow, etc. The parameters associated with these calculations are as follows: 


A. O2 Accumulator Calculations 

1. O2 quantity as a function of initial quantity, inlet flow, outlet 
flow, time, etc. 

2. Pressure as a function of quantity, temperature, tank volume. 

3. Temperature is a function of initial temperature, inlet ^2 
temperature, heat leak, etc. 

4. Mass flow inlet as a function of cryogenic O2 pressure, accumulator 
pressure, and restrictor f Tow/pressure characteristics. 
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HGURE4.7-«10r) ARPXS MODULE FUNCTIONAL ELEMENTS AND MODULE INTERFACES 
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TAbLE4. 7-30 . atmosphere REVITALIZATION PRESSURE CONTROL SUBSYSTEM FAPAI 1ETE.RS 


PARAMETER 

TVPE° 

Primary 0^ Accumulator - inlet 0 ^ temperature 

I 

Primary 0^ Accumulator - cryo 0^ pressure 

I 

Secondary O2 Accumulator - inlet 0^ temperature 

I 

Secondary Accumulator - cryo Go pressure 

I 

Primary O2 Accumulator - O2 mass 

CP 

Secondary O2 Accumulator - O2 mass 

CP. 

Primary O2 Accumulator - Pressure 

p 

Secondary O2 Accumulator - Pressure 

p 

Primary O2 Accumulator - Temperature 

p 

Secondary O2 Accumulator - Temperature 

p 

Primary O2 Accumulator - O2 inlet mass flow - cryo 

• I 

Secondary O2 Accumulator - O2 inlet mass flow - cryo 

I 

PRIMARY 'b’2 ACCUMULATOR - O2 mass outlet flow 

p 

SECONDARY O2 ACCUMULATOR - O2 mass outlet flow 

p 

AUXILIARY O2 TANK - O2 mass 

CP 

AUXILIARY O2 TANK - pressure 

p 

AUXILIARY O2 TANK - Temperature 

p 

AUXILIARY O2 TANK - O2 mass outlet flov; 

, p 
1 , 

AIRLOCK SUPPORT - O2 pressure 

p 

AIRLOCK SUPPORT - O2 mass flow 

p 

N2 PRIMARY TANK - N2 Mass 

CP 

N2 AUXILIARY TANKS - N2 mass 

CP 

N2 PRIMARY TANK - pressure 

p 

N2 SECONDARY TANKS - pressure 

P 

N2 PRIMARY TANKS - temperature 

p 

N'2 SECONDARY TANKS - temperature 

p 

N2 PRIMARY - N2 mass flow outlet 

p 

N2 SECONDARY - N2 mass flow outlet 

p 

Numerous Control Logic Outputs/ Inputs 

p 

Electrical Pov/er System - Bus Voltages 


Aux O2 regulator - Output Pressure {include relief) 

’p 

Aux O2 regulator - Input Pressure 

. p 

Aux ©2 regulator - Relief vent mass flow rate 

p 

« ■' 1 iM««niw»iJUUMj.*u.nin 
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i/‘ t>LL'> • 7"30. 


(CONTINUED) 


PARAMETER 


HID SECTION EMERG O 2 flow 1 ~ mass flow 
MID SECTION EMERG 0^ flow 2 - mass flow 
HID SECTION EMERG O 2 flow 3 - mass flow 
HID SECTION EMERG O 2 flow 4 - mass flow 


PORTABLE O 2 bottle fill - 
PORTABLE O 2 bottle fill - 
PORTABLE O 2 bottle fill - 
PORTABLE O 2 bottle fill - 


1 bottle pressure 

2 bottle pressure 

3 bottle pressure 

4 bottle pressure 


PORTABLE O 2 bottle 
PORTABLE O 2 bottle 
PORTABLE O 2 bottle 
PORTABLE O 2 bottle 


fill 1 - mass flow 
fill 2 - mass flow 
fill 3 - mass flow 
fill 4 - mass flow 


PRIMARY O 2 - 100 PSI reg - inlet pressure 

PRIMARY O 2 - 100 PSI reg - outlet pressure 

PRIMARY O 2 - 100 PSI reg - mass flow 

PRIMARY O 2 - 100 PSI reg - relief vent mass flow 


SECONDARY O 2 - 100 
SECONDARY O 2 - 100 
SECONDARY O 2 - 100 
SECONDARY O 2 - 100 


PSI reg - inlet pressure 

PSI reg - outlet pressure 

PSI reg - mass flow 

PSI reg - relief vent mass flow 


PAYLOAD N 2 tanks - mass 

PAYLOAD N 2 tanks - pressure 

PAYLOAD tanks - temperature 

PAYLOAD N 2 tanks - mass flow out 


PRIMARY N 2 175 PSI 
PRIMARY N 2 175 PSI 
PRIMARY N 2 175 PSI 
PRIMARY Hy 175 PSI 


reg - inlet pressure 
reg - outlet pressure 
reg - mass flow 
reg - relief vent flow 
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4.7-30, (CONT INUED). 


PARAMETER 

TYPES 


SEC0N0A\RY N 2 175 PSI reg - inlet pressure 

P 


SECONDARY N 2 175 PSI reg - outlet pressure 
SECONDARY Ng 175 PSI reg - mass flow 

P 


SECONDARY N 2 " relief vent mass flow 

P 


PRIMARY N 2 Check valve - outlet pressure 

P 


SECONDARY M 2 Check valve - outlet pressure 

P 


PRIMARY POTABLE H 2 O Bottle Regulator - inlet pressure 

P 


Primary POTABLE H 2 O Bottle Regulator - relief vent flow to cabin 

P 


PRIMARY POTABLE H 2 O Bottle Regulator - flow rate 

P 


SECONDARY POTABLE H 2 O Bottle .Regulator - inlet pressure 

P 


SECONDARY POTABLE H 2 O Bottle Regulator - relief vent flow to cabin 

P 


SECONDARY POTABLE H 2 O Bottle Regulator - flow rate 

P 


POTABLE H 2 O tank 3 - N 2 (gas)- quantity 

CP 


POTABLE H 2 O tank 3 Gas Pressure 

P 


POTABLE H 2 O tank 3 - temperature 

P 


POTABLE H 2 O tank 3 - Gas flow/bottles 1 & 2 

P 


POTABLE H 2 O tank 3 - Gas volume, 

P 


POTABLE H 2 O tank 3 - H 2 O mass remaining 

I 


POTABLE H 2 *^ Tanks 1 and 2 - M 2 (Gas) mass 

P 


POTABLE H 2 O tanks 1 and 2 - Gas pressure 

P 


POTABLE H 2 O tanks 1 and 2 - temperature 

P 


POTABLE H 2 O tanks 1 and 2 - Gas flow to cabin 

P 


POTABLE H 2 O tanks 1 and 2 - Gas volume 

P 


POTABLE H 2 O tanks 1 and 2 - H 2 O mass remaining 1 

I 


POTABLE H 2 O tanks 1 and 2 - H 2 O mass remaining 2 

I 


Crev/ Compartment CO 2 Partial Pressure 

P 


Pri Np to Cabin Pressure Controller - Pressure 

P 


Sec .Np to Cabin Pressure Controller - Pressure 

P 



GcnJGiLAS yiS^r-jf^ofUjOLUTTitos oo/trPvs«/v » eyaST 
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;;:'LE 4 . 7 - 30 . (continued) ' 


PARAMETER 

TYPE^ 

pri O 2 to Cabin Pressure Controller - Pressure 

P 

Sec O 2 to Cabin Pressure Controller - Pressure 

P 

Pri Cabin Pressure Regulator - inlet pressure 

P 

Sec Cabin Pressure Regulator - inlet pressure 

P 

Pri O 2 mass flow to cabin 

CP 

Sec O 2 mass flow to cabin 

CP 

Pri N 2 mass flow to cabin 

CP 

Sec N 2 mass flow to cabin 

CP 

Pressurized Volume 

P 

Crew Compartment Pressure - total 

P 

Crew Compartment Pressure - O 2 Partial Pressure 

CP 

Crew Compartment Pressure - Decay rate 

CP 

Crew Compartment - O 2 mass 

P 

Crew Compartment - N 2 mass 

P 

Crew Compartment - temperature (gas) 

I 

Crew Compartment - O 2 leakage, loss 

P 

Crew Compartment - N 2 leakage, loss 

i. 

'.'•P 

Airlock Compartment - O 2 mass 

P 

Airlock Compartment - N 2 mass 

P 

Airlock Compartment - Pressure 

P 

Airlock Compartment - O 2 mass loss /gain 

P 

Airlock Compartment - N 2 mass loss/gain 

P 

Payload Compartment - O 2 mass 

P 

Payload Compartment - N 2 mass 

P 

Payload Compartment - Pressure 

P 

Payload Compartment - O 2 mass loss/gain 

P 

Payload Compartment - N 2 mass loss/gain 

P 

i' 

Avionics Bay 1 - O 2 mass 

P 

Avionics Bay 1 - N 2 mass 

P 

Avionics Bay 1 - Pressure 

P 


/vscCfii'O/v/vei.s. cyouGi.A& ccsm^jznJX' » E^si-r 

4.7-330 


MDC El 201 
30 December 1974 


4.M ). (COMPLETE) 


PARAMETER 

TYPE^ 

f 

Avionics Bay 1 - 0^ mass loss/gain 

P 

Avionics Bay 1 - \ mass loss/gain 

P 

Avionics Bay 1 - Sas temperature 

I 

Avionics Bay 2 - O 2 mass 

P 

Avionics Bay 2 - mass 

P 

Avionics Bay 2, - pressure 

P 

/'vicnics Bay 2 - O 2 mass loss/gain 

P 

Avionics Bay 2 - N 2 mass loss/gain 

P 

Avionics Bay 2 - Gas temperature 

I 

Avionics Bay 3 - Og mass 

P 

Avionics Bay 3 - N 2 mass 

P 

Avionics Bay 3 - Pressure 

P 

Avionics Bay 3 - O 2 mass loss/gain 

P 

Avionics Bay 3 - N 2 mass loss/gain 

P 

/Avionics Bay 3 - Gas temperature 

- 

I 



P = Performance Parameter 
CP = Critical Performance Parameter 
1 = Input parameter (from another module) 
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B. Auxiliary O 2 Calculations 

1 . O 2 quantity remained as a function of time, initial quantity, flow, etc. 

2 . O 2 source pressure as a function of quantity, temperature, tank volume. 

3. Temperature as a function of initial temperature, heat leak, etc. 

N 2 Source Calculations 

1. Primary, auxiliary, and payload N 2 quantities as a function of 
initial quantities, outlet flow, etc. 

2. Primary, auxiliary and payload temperature as a function of initial 
temperatures, heat leaks, etc. 

3. Primary, auxiliary and payload source pressures as a function of 
temperature, tank volumes, quantity, etc. 

D.. Components characteristics needed to perform these calculations are: 

1. Cryogenic O 2 restrictor/heat exchanger O 2 flow versus differential 
pressure characteristic. 

2 . O 2 accumulator volumes 

3. O 2 ahd-N^ tank volumes 

Pressure Regulation and Distribution - The O 2 and N 2 pressure regulation and 
distribution functions are the calculation of the pressures, temperatures, flow 
rates, etc. throughout the distribution networks. The parameters associated with 
the calculations are as follows: 

A. O 2 Distribution Network Calculations 

1. Gas temperatures as a function of source temperature and heat leaks. 

2 . Pressures as a function of regulator characteristics, inlet 
pressures, relief characteristics, Tine volumes, flow rates, etc. 

3. Total system flow rate as a function of demand, leakage, etc. 

4. O 2 delivery flow rates to the four Emergency O 2 outlets as a function 

of inlet/outlet pressures, valve/line flow characteristics . 

5. O 2 delivery flow rates to the four portable O 2 fill outlets as a 
function of inlet/outlet pressures, fill tank volume, valve/line 
flow characteristics 3 etc. 


C. 
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n. N 2 Distribution NetworK Calculations 

1. Temperatures as a function of source temperatures and heat leaks. 

2. Pressures as a function of regulator characteristics , inlet 
pressLires/rel ief characteristics , line volumes, flov/ rates, etc. 

3. Total system flow rate as a function of demand, leakage, etc. 

4. N 2 gas flow rate and quantity delivered to the potable water tanks 
as functions of regulator characteristics, H 2 O tank N 2 volume, 
remaining H 2 O quantity, etc. 

5. N 2 gas flow to cabin via the valve opening the H 2 O tanks N 2 side 
to cabin. 

C. The component characteristics needed to perform these calculations are; 

1, Pressure regulators flow characteristics, relief pressure points, 
and regulation pressure points. 

2. Line/equipment volumes. 

Cabin Pressure Control - The cabin pressure control functions are the calculation 
of various compartment pressures ,.02 and N 2 gas quantities, gas flow rates into 
and out of the cabins, and pressure decay rates. The parameters associated with 
these calculations are as follows: 

A. Flow Rates 

1. Og flow rate to cabin as function of pressures, partial pressure 
controller characteristics, cabin pressure regulator characteristics, 
etc. 

2. N 2 flow rate to cabin as function of pressures partial pressure 
controller characteristics, cabin pressure regulator characteristics. 

3. O 2 and N 2 flow from cabin, as function of pressures, cabin leak 
rates, relief valves, depressurization valves, etc. 

B. Gas Quantities 

1. O 2 and N 2 quantities in cabin as a function of initial quantities, 
flow rates into and out of cabin, etc. 


:tsproducibility of the 
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C, Cabin Pressure 

1. Caution and vvarning signals as functions of pressures. 

2. Cabin pressures as a function of various gas partial pressures. 

3. O 2 partial pressure as a function of O 2 quantity, cabin temperature, 
cabin volumes. 

4. M 2 partial pressure as a function of No quantities, cabin tempera- 
ture, cabin volumes. 

D. Component characteristics required to perform these calculations are: 

1. Cabin pressure regulators flow/pressure characteristics, regulation 
points, etc. 

2. Cabin pressure relief valves flow/pressure characteristics, open and 
close points for solenoid valves. 

3. O 2 partial pressure controller operating voltage levels, open and 
close points for solenoid valves. 

4. Avionics bays vent orifice flovz/pressure characteristics (effective 
flow area), etc. 

5. Airlock vent and equalization valve flow/pressure characteristics. 

6. Cabin or compartment gas volumes, leakage, etc. 
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; j (. s Refer^ence Data Sources and Formats 

Reference modules for ARPCS module validation can be developed from routines 
described in Reference 09 and 70 . The G189A (see Ref. 09 ) program was developed 
for JSC and provides a versatile analytical tool for support of environmental 
systems work. Reference 70 describes environmental analysis subroutine used for 
mission analysis and consumables studies. 

Figure 4.7-107 is a flow chart for calculation of gas flow into or from a 
manifold or compartment from various source.., as well as calculating the resulting 
pressure, temperature, etc. This routine is used in providing a reference module 
for cabin pressure control- (see Figure 4,7-108) and distribution/source 
(Figure 4,7-109). The O 2 distribution network module can be developed in a 
similar way. It should be noted that the proper system control logic must be 
integrated into these modules. 

The system and component design performance requirements, analysis, performance 
predictions,; and test results provide data for direct comparison with the Shuttle 
simulation results. Reference 31 will provide these types of data as they become 
available. The design requirements can be determined from Reference 71 . 
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LEGEND: 

Manifold pressure 

h 

-Pressure of I-— load/source 

'hh 

T/v--r"" Temperature of I— load/source 

Plow rate from I— load/source into manifold 

+■ h 

T^w-t - Temperature into manifold from I— tank 
Tj - Temperature delivered .to I— load/source 

X U 

%j. - Fluid velocity from I— tank into manifold 
tii "C, - Fluid temperature in manifold 

~ Fluid density 

Fluid mass in manifold 
^ - Fluid specific heat 
ti- - Time increment 

Flow area from I— load/source into manifold 
~ Critical pressure ratio 


FIGURE 4.;-107. (CONTINUED) 
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FIGURE 4.7-108. CABIN PRESSURE CONTROL REFERENCE MODULE MATH FLOW 
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FIGURE 4.7-108, (CONTINUED). 
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LEGEND: 

Pc - Crew Compartment Pressure 
fi - Lock Compartment Pressure 
Payload Compartment Pressure 
^/"Avionics Bay 1 Pressure 

- Avionics Bay 2 Pressure 
Pgs~ Avionics Bay 3 Pressure 

/gnjw - Ambient Pressure 

Ambient Temperature 

Compartment heat exchanger outlet temperature 
Z. ~ Crew Compartment Temperature 
■ 7L - Loci Compartment Temperature 
Ip - Payload Compartment Temperature 
Z, - Avionics Bay 1 Temperature 

- Avionics Bay 2 Temperature 
Tss - Avionics Bay 3 Temperature 

^;r - Effective flow area of relief valves, lines, etc., betv/een compartments 

4c - Heat gain V'ate of crew compartment 

• 

Heat gain rate of lock compartment 

- Heat gain rate of Payload compartment 
65 , - Heat gain rate of Bay 1 compartment 

Heat gain rate of Bay 2 compartment 

• 

<$63 - Heat gain rate of Bay 3 compartment 
Electrical heat rate for compartment 

0 

Guc-cy - Heat leakage rate from compartment 
<?k£t "■ Metabolic heat rate 

- Compartment volume 

- Constant pressure specific heat of gas 
Cy — Constant volume specific heat of gas 

- Gas Constant 

Y ~ Specific heat ratio of gas . 

Gas flow rate into compartment {^) from compartment y 
O 2 gas flow rate into compartment y- from compartment y. 

“ ^2 gas flow rate into compartment from compartment y. 

- CO 2 gas flow rate into compartment^ from compartment y. 

~ gas flow rate into compartment?^ from compartment y, 

FIGURE 4.7-108. (CONTINUED) 
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X compartment O 2 gas quantity 
comoartment N 2 gas quantity 
-vA(yoz)^-X compartment CO 2 gas quantity 
compartment H 2 O gas quantity 



FIGURE 4.7-108 (CONTINUED) 
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■ FIGURE 4.7-109. (CONTINUED) 
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FIGURE 4.7-109 (CONTINUED) 
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LEGEND: 

" Cabin Pressure Regulator inlet pressure 

’V'V,'.-*'- 

R, - Cabin Pressure (Crew Compartment) 

Og Regulator (100 psi) outlet pressure 
170 psi Regulator outlet pressure 
pHzo-t-HjiO tank regulated pressure 
Hiz-sr N 2 170 psi Regulator inlet pressure 

Si 7Z - Cabin temperature 

-fae&i - Cabin pressure regulator inlet temperature 
%z-i.-7~^2 Pressure regulator inlet temperature 

“ H 2 O tank gas temperature 
7^-51 “ N 2 170 psi regulator inlet temperature 

“ Cabin pressure regulator inlet manifold volume 
Volume of H 2 O in H 2 O tank 
Vr “ Volume of H 2 O tank 

WOs-s, “ Vol ume of manifold inlet to N 2 pressure regulator 
P^^' outlet volume 

“Effective flow area of cabin pressure regulator 
Effective flow area of H 2 O tank pressure regulator 
Cp - Specific heat at constant pressure 
Cv^ - Specific heat at constant volume 
Specific heat of liquid v/ater 

^Coz)-0^ flow rate into cabin 
- N 2 flow rate into cabin 
^yz--i.T~ Flow 'rate of N 2 170 psi regulator 
~ H 2 O flow rate into H 2 O tank 
H 2 O flow rate out of H 2 O tank 
Nji quantity in H 2 O tank 

yrr^Coz)^- Zahin pressure regulator inlet line O 2 mass quantity 
Cabin pressure regulator inlet line N 2 mass quantity 

■^riT^-( ~ *^ 2 ^ quantity 

“ N 2 170 psi regulator inlet quantity 

FIGURE 4.7-109 (CONTINUED) 
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V"- Specific heat ratio (CP/CV) 
Gas constant 
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LEGEND: 

- Tank pressure 
Ambient pressure 

Effective flovj area of relief line/ valve 
% ~ Temperature of tank 
■^“Tank compartment temperature 
Flow rate through relief line 
■^sc-Flow rate to distribution system 
^s“ Quantity of gas in source tank 
^ 50 - Gas density in tank 

electrical heater power 
Heat leak into tank 

- Gas specific heat 

- Tank volume 


FIGURE /i. 7-1 10, (CONTINUED) 
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• f.s Validat i on Methods and Check Cases 

The verification approach for the ARPCS simulation module utilizes and expands 
u;-i.n the technique presented in Section 5-1 „ The use of this flow chart 

allows the comparison of the simulation module with various types of checkcases 
(test, analysis, software model, etc.). Figure 4.7-112 presents the flowchart for 
checkpoint generation subroutine in Figure 5.1-1 .. Figure 4.7-1 13 is the sub- 
subroutine shown in Figure 4.7-112 as "COMBCHK" and generates the "all checkpoints 
sequenced flag". 

Some liberty was taken in the notation for variables in these flow charts. 

With the exceptions of time (t), initialization time (to), computation time ( At), 
and COMBCHK variables, the variables used represent a group or "set" of parameters 
rather than a single variable. Each parameter set is associated with a particular 
driver, function or logic. For example, the variable PAOS (JAOS) represents a 
set of parameters including pressure, O 2 quantity, etc. associated with the 
auxiliary O 2 supply. The identification of the actual parameters is dependent 
on exact system design and simulation fidelity desired. 

This verification technique provides the following capabilities: 

« Initialization of parameters 

fi Interfacing module drivers 

• ARPCS functional element drivers 

• Time-dependent evaluations 

t Multiple evaluations in a single run. 

Initialization - At the start of each checkcase the ARPCS module and driver 
parameters, logic, and conditions are set to pre-detennined values. The values 
may change as the checkcase is allowed to continue. 

External Module Drivers - The parameters normally provided by interfacing modules 
are provided by module drivers. These drivers supply parameter values which 
can be held constant or allowed to vary according to calculations performed 
within the driver. The following module drivers v/ere identified: 
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ImIT JCRY 

PCRY (JCRY) 


CRYIC (JCRY) 

emit JATC 

PATC (JATC) 


ATCIC (JATC) 

EMIT JCLNT 

PCENT (JCNT) 


CENTIC (JCENT) 

EMIT JH20 

PH20 (JH20) 


H20IC (JH20) 

EMIT JETRC 

PETRC (JETRC) 


EEPIC (JETRC) 

EMIT JFIR 

PFIR (JFIR) 


FSIC (JFIR) 

EMIT JAOS' 

PADS (JAOS) 


AOIC (JAOS) 

EMIT JN2S 

PN2S (JN2S) 


SN2IC (JN2S) 

EMIT JCBNP 

PCBNP (JCBNP) 


CPIC (JCBNE ) 

EMIT JM2L 

CN2E (JN2E) 



EMIT J02E 

C02E (J02E) 


.tEMIt 

EMIT JCBNE 

CPCE (JCBNE) 


At 

EMIT J02N 

D02IC (J02N) 


to 

EMIT JN2N 

DN2IC (JN2N) 



CRYO STATIC FEAG 

ETRC STATIC 

; FEAG 

ATC STATIC FEAG 

FIR STATIC 

FEAG 

PRWD CiTflT 

CENT STATIC FEAG 

AOS STATIC 

FEAG 

UDnr 0 1 M 1 

H20 STATIC FEAG 

N2S STATIC 

FEAG 




J 


JCRY 

= 1 

JCBNP = 1 

JATC 

= 1 

JN2E = 1 

JCENT 

= 1 

J02L = 1 

JH20 

= 1 

JCBNE = 1 " 

JETRC 

= 1 

J02N = 1 

JFIR 

= 1 

JN2N = 1 

JAOS 

= 1 

t = to 

JN2S 

= 1 

CHKPSEQ FEAG= CEEAR 


CGHBCHK 
(GENERATE 
JCRY, JATC ..! 
...JN2N) 



RETURN 
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FIGURE 4.7-112. CHECK POINT DRIVER, ATMOSPHERE REVITALIZATION PRESSURE CONTROL 
SUBSYSTEM (ARPCS) FLOWCHART 
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CRY02 SOURCE INITIAL CONDITIONS 
ACTIVE THERMAL CONTROL INITIAL CONDITIONS 
H?0 COOLANT INITIAL CONDITIONS 
POTABLE H20 INITIAL CONDITIONS 
ELECTRIC POWER INITIAL CONDITIONS 


FIRE SUPPRESSION INITIAL CONDITIONS 
AUX 02 SOURCE INITIAL CONDITIONS 
N2 SOURCE INITIAL CONDITIONS 
CABIN PRESSURE CONTROL INITIAL CONDITIONS 
N2 CONTROL LOGIC 


02 CONTROL LOGIC 
CABIN PRESSURE CONTROL LOGIC 
02 DISTRIBUTION NETWORK INITIAL CONDITIONS 
N2 DISTRIBUTION NETWORK INITIAL CONDITIONS 
ACTIVE THERMAL CONTROL PARAMETERS 


CRY 02 PARAI<1ETERS 
H20 COOLANT PARAMETERS 
POTABLE H20 PARAf^TERS 
ELECTRIC POWER PARAMETERS 
FIRE SUPPRESSION PARAMETERS 


AUX 02 SOURCE PARAT'lETERS 
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PCRY (JCRY) 
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FIGURE 4. 7-112 (continued) 
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FIGURE 4,7-112 (CONTINUED) 
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LEGEND; 


to 

= 

Universal time at initialization 

At 

= 

Computation time 

tCMIT 

= 

Limit on time 

CM IT 


Limit 

CRY 

= 

Cryogenic element 

ATC 

= 

Active Thermal Control Element 

CLNT 

- 

Coolant element 

H20 

= 

H 2 O element 

LTRC 


Electric element 

FIR 

= 

Fire Suppression element 

AOS 

= 

Auxilliary O 2 element 

N2S 

= 

N 2 source element 

CBNP 

= 

Cabin Pressure element 

N2L 

= 

N 2 logic element 

02L 

- 

O 2 logic element 

CBNL 

= 

Cabin Logic element 

02N 

= 

O 2 network element 

N2N 

= 

N 2 network element 

J 

= 

Indexing variable for indicated parameters 

^IC 

= 

Indicated parameter initial conditions 

P 

= 

Parameters for indicated element 


FIGURE 4.7-112 (COMPLETE) 
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• PRSD Cryogenic O2 supply - provides O2 supply pressure temperature, 

quantity, etc, 

6 Active Thermal Control - provided cryogenic O2 feed temperature^ etc. 

e ARS-H2O Coolant - provides cabin temperature, CO2 quantity, humidity, 
etc. 

0 Potable H2O Management - provides quantity H2O remaining (each tank), • 
temperature, etc. for N2 pressure quantity, etc. calculations. 

e Electrical Power Distribution - provides bus voltages for logic, etc. 

• Fire Suppression - provides freon quantity release rate into cabin 
for cabin pressure calculations, etc* 

Functional Element Drivers - Certain intramodule parameters provide logic changes, 
etc. which require thorough verification. Drivers are included to provide ease in 
this verification. Those drivers identified were: 

• Auxiliary O2 source - parameters include tank pressure, quantity, etc. 

• N2 source - parameters include tank pressures, quantities, etc. 

0 Cabin pressure control - parameters include cabin total pressure, 
pressure decay rate, O2 partial pressure, etc. 

Multiple Evaluations - The sub-subroutine "COMBCHK" (Figure 4.7-113) generates the 
values of indexing variables controlling the checkcase conditions and determinies 
when all check points have been sequenced (CHKPSEQ). Since the number of check- 
cases performed during a single run is the product of the number of parameter 
sets (LMIT JCRY, etc.), care must be taken to prevent a large number of unnecessary 
checkcases being performed. Effort must be made to complete the module verifi- 
cation with a minimum number of checkcases. This may be best accomplished by 
restricting certain parameter sets to nominal values, while cycling through the 
more significant parameter sets. The run could then be repeated for different 
parameter sets . 
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ARPCS Data Base Impact 

The major impact to the ARPCS data base is the impact of the reference module 
{Figures 4.7-107, 4. 7-108^and 4.7-109) and the functional element/module drivers of 
Figure ^‘^-ll 2. Most processing subroutines (data input/output routines) would be 
common to all modules being validated. Data files are required for storage of the 
output data tables. The use of analysis/test/design requirements as reference 
data requires the use of special drivers. These drivers establish and maintain the 
conditions within and interfacing with the module which correspond to the analysis/ 
test/design conditions. The plotting or formatting of the simulation results 
would require a few utility subroutines of small data base impact. 
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4. 7. 6. 1.2 ARS-CAC5 Subsystem Description 

The ARS Cabin Atmosphere Control Susbystem provides the circulation of the 
atmosphere, temperature and humidity control, and CO 2 and odor control. Figure 
4.7-114 provides a simple schematic of the interfaces with other ECLSS modules. 

Atmosphere Circulation - This subsystem provides atmosphere circulation for the 
crew quarters, and avionics bays. A simple schematic of the crew quarters circula- 
tion is shown in Figure 4.7-1 15 and the avionics bay schematic is shown in Figure 
V 4.7-116, 

Temperature Control - This element provides cooling and heating of the cabin 
atmosphere. Thermal transport is accomplished by means of two water loops, as 
shown in Figure 4.7-116 • The primary and secondary loops are identical, except 
that the secondary loop has one water pump vice two as in the primary loop. 

Heat rejection from the water loops to the ATCS is accomplished at the cabin 
interchanger through which both' water loops and both ATCS freon loops flow. Two 
water sublimators receiving water from the potable water system provide an active 
heat sink during launch and orbital periods when the payload bay doors, housing 
the space radiator system on the underside, are closed. The sublimators are 
active during entry to an altitude of TOOK feet.. Between 100K feet and 20K feet 
there is no active heat rejection from the Orbiter, and temperatures are governed 
by t he bulk thermaT capacitance of the vehicle. Below 20K feet through landing, 
ammonia evaporators in the ATCS are activated for heat rejection. 

Figure 4,7-115 from Reference 12 shows the Orbiter cabin atiriosphere thermal 
and purification system. Three fans circulate cabin air through an aerosol filter, 
through lithium hydroxide canisters for COg removal then on through a condensing 
(cooling) heat exchanger for temperature and humidity control. Condensate is 
removed to the waste management system. The condensing heat exchanger is part of 
the v/ater coolant loop system shown as the "cabin HX" in Figure 4. 7-T14. The 
cabin temperature is maintained by controlling the airflow through the cabin heat 
exchanger by means of a controller regulating bypass flow around the heat exchanger. 

The controller is regulated by a temperature selector. If cabin heat input is 
d’'; required the controller activates electric heaters in the bypass loop. 
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AHS “ CAPS Module Functions and Parameters 

Figure 4.7-117 provides an overview of the ARS-CACS simulation module 
functional elements and interfaces with other modules. There are five basic 
functions performed within the module: air circulation, CO 2 /H 2 O control, H 2 O 

coolant flow, thermal control, and control logic. Tables 4.7-31, 4.7-32, and 
4.7-33 provide a listing of the atmosphere control module parameters. The 
following discussion is related to the calculations performed within each of the 
module elements. 

Air Circulation - Air circulation calculations are provided for each of the three 
avionics bays and the crew quarters. 

• Fan/Duct flow rates’- These are functions of input voltages, air density, 
duct pressure drop and fan efficiency. 

• Duct pressure drop - a function of air velocity, densi1;y, and duct 
configuration or branches. 

• Condensate line inlet pressure - a function of pump outlet pressure and 
duct pressure drop. 

0 Duct air temperature - functions of cabin temperature, duct velocity, 
fan power, heat exchanger outlet temperature, air cooled equipment 
electrical power, and electrical heaters electrical power. 

CO 2 Control _ control is provided for the crew quarters. 

• CO 2 removal rate - a function of cabin CO 2 pressure, air flow rate through 
Li OH canisters, and air temperature. 

H 2 O Coolant Loop Flow _ calculates H 2 O coolant loop flow rates and pressures. 

6 Pump flow rate - a function of input voltage, pump pressure rise, and 
inlet pressure. 

• Loop pressure drop - a function of H 2 O pump flow rate, H 2 O temperature, 
and branch flow rates. 

0 Branch flow rates - functions of pump flow rates and cabin heat exchanger 
outlet H 2 O temperature. t 

e Accumulator HgO Quantity - a function of H 2 O temperature. [ 

« Accumulator Pressure - a function of H 2 O quantity and temperature. 
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TABLE 4.7-31 WATER COOLANT LOOP MODEL INPUT DATA 


PARAMETER 

TYPE^ 

SPECIFIC HEATS 

DB 

HEAT TRANSFER COEFFICIENTS 

D8 

SOURCE HEAT CAPACITIES 

DB 

SOURCE TEMPERATURES 

DB 

LOOP TEMPERATURES 

DB 

INTERNAL HEAT LOADS 

DB 

TRAJECTORY AND ATTITUDE HEAT LOAD TABLES 

DB 

TRAJECTORY AND ATTITUDE 

I 

MISSION PHASE FLAGS 

I 

HATER PUMP/LOOP FLOW CHARACTERISTICS 

DB 

INTERFACING MODULE PARAMETERS 

I 

WATER PUflP POWER 

DB 

AVIONICS EQUIPMENT POWERS 

DB 

AVIONICS BAY FAN/AIR FLOWRATE CHARACTERISTICS 

db' 

AVIO^[ICS BAY FAN POWER 

DB 

WATER PUMP AND AVIONICS BAY FAN ON-OFF DISCRETES 

I- 

/’ VI ONI CS EQUIPMENT ON-OFF DISCRETESC 

I 

POTABLE WATER USAGE 

I 

SUBLIf^OR OPERATING CHARACTERISTICS 

DB 

Liqilin COOLED GARMENT HEAT LOADS 

DB. 


a DR - from Data Base 


I * Input 
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TABLE 4.7-32 WATER COOLANT LOOP MODEL OUTPUT DATA 


PARAMETER 

TYPE® 

H^O ACCUMULATOR QUANTITY - PCL S SCL 

P 

AVIONICS BAY 1 AIR FLOW 

P 

AVIONICS BAY 2 AIR FLOW 

P 

AVIONICS BAY 3 AIR FLOW 

P 

SUBLIMATOR OUTLET TEMP - PCL & SCL 

CP 

H^O COOLANT FLOW RATE - PCL ?< SCL 

P 

SUBLIMATOR 1 VAPOR VENT TEMP 

P 

SUBLIMATOR 2 VAPOR VENT TEMP 

P 

H 2 O PUMP OUTLET PRESSURE - PCL S SCL 

P 

AVIONICS BAY 1 OUTLET TEMP - PCL & SCL 

CP 

AVIONICS BAY 2 OUTLET TEMP - PCL & SCL 

CP 

AVIONICS BAY 3 OUTLET TEMP - PCL t SCL 

CP 

CABIN INTERCHANGER OUTLET TEMP - PCL & SCL 

CP 

SOUPXE TEMPERATURES {ALL CAPACITIVE LOADS) 

p 

LOOP TEfiPERATURES (NON-TELEMETERED) - PCL S SCL 

p 

FLOW PATES (MOM-TELEMETERED) - PCL ^ SCL 

p 

HEAT TRANSFER RATES (NON-TELEMETERED) - PCL & SCL 

p 

PUMP OUTLET TEMP - PCL & SCL 

CP 


a P - Performance Parameter 

CP - Critical Performance Parameter 
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TABLE 4.7-33, CABIN ATMOSPHERE PERFORMANCE PARAMETl ^ 

/y' . 

\\ 


PARAMETER 

TYPE® 

’TTAP.OLIC HEAT, CO^ AND WATER PRODUCTION 

DB 

CABIN EOUIPMEMT HEATIflG RATES 

I 

TRAJECTORY/ATTITUDE CABIN HEATING RATES 

I 

CABIN FAN PERFORMANCE DATA 

DB 

CABIN FAN ON-OFF DISCRETES 

P 

Li OH CANISTER ON-LINE TIME 

P 

Li OH CANISTER PERFORflANCE CHARACTERISTICS 

DB 

TEMPERATURE SELECTOR SETTING 

P 

BULK CABIN THERMAL CAPACITANCE 

DB 

CONDENSING HEAT EXCHANGER CHARACTERISTICS 

DB 

COfiTROLLEP/BYPASS THROTTLE CHARACTERISTICS 

DB 

CABIN TEMPERATURE 

CP 

CABIf! HUMIDITY 

CP 

CABIN CO^ PARTIAL PRESSURE 

CP 

CABIN AIR FLOW RATE 

CP 

OUTLET HUMIDITY 

p 

OUTLET COg PARTIAL PRESSURE 

p 

OUTLET TEf'lPERATURE 

CP 

COflDENSING Hx AIR FLOW RATE 

p 

COUnENSING Hx OUTLET AIR TEMPERATURE 

p 


a P - Performance Parameter ■ 

CP - Critical Performance Parameter 
I - Input 
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Thermal Control - Temperature calculations are provided for the iUC coolant loops 
and interfacing module. 

e Pump outlet temperature - a function of H 2 O flow, pump inlet temperature, 
pump pressure rise, and pump input electrical power. 

© Col dpi ate equipment temperature - functions of electrical pov;er, inlet 
Hgp temperature, equipment temperature, and H 2 O flow rate. 

e Heat exchanger outlet H 2 O temperatures - functions of inlet H 2 O 

temperature, H 2 O flow rate, interchange fluid inlet temperatures, and 
interchange fluid flow rate. 

« Heat exchanger outlet interchange fluid temperatures - functions of 
interchange fluid inlet temperature and flow rate and the H 2 O inlet 
temperature and flow rate. 

• Accumulator H 2 O inlet temperature - a function of cabin heat exchanger 
outlet H 2 O temperature/flow rate, bypass temperature and flow rate. 

• Pump inlet temperature - a function of the accumulator inlet temperature, 
accumulator temperature and H 2 O flow rate. 

ARS-CACS Reference Data Sources and Data Format 

Various reference data sources exist for the ARS-CACS. Data concerning' 
component and system performance requirements, predictions, and tests are 
available fronv References 31 and 72 . In addition, several computer programs are 
available for development into a reference model or performing analyses. 

References 69 and 70 described component subroutines which can be combined to 
provide a system simulation reference module. Reference 73 is an ARS/ATCS 
performance routine designed for use with the Wang 700-series programmable 
calculator system. The use of this type of equipment allows an average runs 
time of five minutes per case, as opposed to hours or days turnaround with a 
regular computer facility. References 74 and 75 provide data for Orbiter heat 
exchanger calculations. The following discussion pertains to the development 
of a independent reference module. 


I 
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Final performance evaluation of the' simulator subsystems modules is best 
accomplished by evaluating the dynamic response of all crew station displayed and 
telemetered parameters pertaining to that subsystem, in a full-up simulation (all 
interfaces operating ) of a mission phase or a transition from one mission phase to 
another. Certain parametric data, other than displayed data, is required to 
verify proper interfacing and coupling with other subsystem modules, e.g., the heat 
load from the H 2 O coolant loops transferred to the ATCS. 

Static check cases can be run with simpler verification models, however, the 
validation of simulator response to combinations of off-nominal operating con- 
ditions, insertion of malfunctions, etc., is not readily performed using simple 
check case models. The subject thermal and atmospheric control models are 
presented as examples of what a verification model involves in terms of input 
data and interface requirements. Maximum use should be made of existing hardware 
sizing and subsystem analysis programs with their data packages in developing an 
integrated verification module, e.g.. Reference 69. 

Primary and Secondary HqO Coolant Loop Model - The math flow for the H 2 O coolant 
loops model (COOLP) is shown in Figure 4.7-118 . This model is applicable for 
generating static or programmed parametric variation check case data from a. 
given set of input data, as well as generating performance data from a dynamic 
simulation run (whereby the simulator supplies the systems configuration and 
trajectory data). Basically COOLP calculates the outlet temperature of each heat 
transfer device in the order of the device position in the loop. Appropriate 
mixing calculations are performed at device output convergence points. Reference 
is made to three subroutines for calculating outlet temperatures for three types 
of heat transfer devices: a) coldplate, b) heat exchanger, and c) a direct 

heat load such as structural cooling, windows, etc. 

COOLP uses an incremental time base for the computations. Typically the 
time increment would correspond to the computation cycle of the simulator module 
being checked. The device inlet temperature is related to the preceeding device 
outlet temperature and assumed constant during the integration time period. 
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The PRI and SEC H 2 O loops are identical except for flow rate, i.e., all heat 
transfer devices are serviced by both loops. The model combines the flow in both 
loops, and the calculated loop temperatures are applicable for both loops, 
parameters for a nori-operating loop could be set to some predetermined value based 
on the temperatures maintained by the operating loop. J 

\'i 

The comp cycle beings at the outlet of the H 2 O pumps andi proceeds around the 
loop as shown in Figure 4. 7-11 B using internally calculated flow rates and heat ■ 
loads as applicable. Not all the coolant loop flow paths are represented for the 
sake of simplicity, e.g., the avionics bay cold plates really consist of a series/ 
parallel arrangement of cold plates for each’ piece of equipment. Some unidentified 
functions are those of the cabin interchanger bypass flow which is controlled by 
the cabin HX outlet temperature, and the sublimator operation. 

Table 4.7-31 is a representative set of input data required to operate COOLP. A 
complete set of starting conditions is required including load source and loop 
temperatures. Data pertaining to vehicle' and subsystem configuration is contained 
in a configuration array of discretes which is continuously updated during the 
course of a run. These data are used to internally compute flow rates and heat 
loads from, tabular type input data. Anumberof scripted malfunctions can be 
handled by inputs to the configuration array. 

Operational data such as heat capacities, heat transfer coefficients, etc., 
will probably not be available until late in the subsystem design/test stage; 
however, high fidelity data of this type is not rc.juired for accurate equilibrium 
solutions. Starting conditions {namely initial loop temperatures, bypass flow 
rates, etc.) can be determined and trimmed by running the model until it reaches 
equilibrium for given static heat loads and vehicle configuration. 

The output parameters for directly evaluating the performance of the H 2 O 
coolant loop module are listed in Table 4.7-32. All the telemetered parameters 
are available for display on any of four crew station CRT's via keyboard callup. 

Other parameters (such as avionics equipment case temperatures) can be checked. 

1 
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using this model; however, they are not identified here. The cutpct from COOLP 
can be used to provide checks on such 'things as equipment overtemp condition 
sensing and proper alarm response. Parameters such accumulator quantities are 
scripted unless a malfunction such as a leak is input, whereby internal compu- 
tations would be made prior to outputting the data. 

Ca bin Atmosphere Control - The math flow for the cabin atmosphere control model 
(CABAIR) is shown in Figure 4.7-119. As with COOLP this model is capable of 
running prescribed check cases or evaluating a simulator run. The output from 
this model consists primarily of cabin temperatures, humidity, and CO 2 partial 
pressure profiles for given starting conditions and dynamic load conditions. The 
air flow into the system is based on the running status and performance charac- 
teristics of the three cabin fans. Flow rates through each of the LIOH canisters 
and the cabin HX are determined in order to calculate the CO 2 and water removal 
rates and heat transfer to the H 2 O coolant loops or heat input to the cabin as 
required. 

CO 2 Level 

CO 2 is removed by passing cabin air over LIOH beds contained in a canister. 

The reaction (2 LIOH + CO 2 Li 2 00^ + H 2 O) results in heat production as well as 
water which is removed by the subsystem. The efficiency of the LIOH canisters 
in removing CO 2 is a function of bed geometry and on-line time. The cabin CO 2 
level is determined by the time integral of the net of the removal and metabolic 
production rates. 

Cabin Temperature 

Cabin air temperature is determined by calculating the net cabin heat produc- 
tion (or loss) and using appropriate starting conditions and thermal capacitance. 
Heat production sources include metabolic, cabin equipment, LIOH canister operation, 
and wall heating. The heat removal is governed by the cabin temp selector which 
controls the air flow through the cabin heat exchanger. The cabin heat exchanger 
heat removal rate in turn is a function of the running condition of the H 2 O coolant 
loops and the ATCS. 
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Cabin Humidity 

The cabin humidity is determined by calculating the net cabin water production. 
Water sources include metabolic, food and waste management, LiOH canister operation, 
etc. The removal is a function of the cabin heat exchanger air flow rate, air 
inlet dew point and outlet air temperature. The calculated water removal rate is 
required by the condensate and urine storage model. 

ARS-ACS Validation Methods and Check Cases 

The methods of Sections 5.1 and 4.2 can be used to verify the ARS-ACS 
simulation module. These methods require the use of interface drivers (to provide 
interfacing module functions) and the module functional element drivers to establish 
and maintain desired conditions for each check case. Drivers are required for the 
following; 

0 ARS-ARPCS module 
0 Electrical Power Generation 
0 Electrical Power Distribution 
0 Active Thermal Control module 
0 Food, Water and Waste Management module 

These drivers should provide capabilities for parameter initialization, 
transient response, steady state response, static inputs, and multiple check case , 
execution during a single simulation run. 

The check cases implemented should include step inputs with a comparison of 
the transient and steady-state responses. Initial check cases should also provide 
a thorough exercise of the module internal responses, as outlined in the design 
requirements documents. Latter check cases should implement refinements due to 
actual component and system design/tests. Actual systems/component test conditions 
can be input as a check case with simulation results compared directly to the test 
results. ■ Other check cases should include the maximum, minimum, and nominal load 
conditions for each subsystem. 

ARS-ACS Data Base Impact 

The ARS-ACS reference module and the module drivers previously discussed 
represent a large impact to the simulation data base. Most of the processing 
subroutines (data input/output; data comparison) would be common to all modules being 
validated. Data files are required for input and output data tables. 
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4. 7. 6. 2 Active Thermal Control System 

The Active Thermal Control System (ATCS) provides the positive means of preventing 
orbiter equipment and fluids from exceeding permissible temperature extremes. This 
section describes the current system design, the expected simulation module's 
functions, identifies parameters associated with the module, and discusses, techniques 
of verification of the module performance. 

ATCS Description 

The ATCS transfers heat from "heat sources" to "heat sinks" via a ciyxulating 
fluid and interconnecting valves and tubing. The heat sources include coldplate 
mounted equipment, warmer fluids flowing through heat exchangers, and pumps. The 
heat sinks include fluid evaporators, colder fluids in heat exchangers, and the 
radiator. The heat sources and sinks are connected by controlling valves, tubing , 
and fluid accumulators. The Orbiter uses two coolant loops which are identical, 
except that the primary loop has two pumps and accumulators, while the secondary 
loop has only one pump and accumulator. Figure 4.7-120 (see Refs. 75 and 78 ) is 
a schematic of the ATCS. A brief description of the major components and their 
pertinent performance characteristics follows. 


Fluid - The circulating cooling liquid used in the Orbiter ATCS is Freon 21. 
The primary characteristics of interest are the density and specific heat, both 
of which vary with the fluid temperature. The ‘consideration of these temperature 
variations in the simulation is dependent on the' required fidelity. 

Pump(s) - The role of the fluid pump is to provide the energy (pressure rise) 
necessary for circulation of the fluid through the loop components. The pump flow 
rate produced will vary with its input voltage and the system's resistance to fluid 
flow (pressure drop). Voltage regulation can be used to reduce the effects of the 
voltage variations. The system resistance (pressure drop) will vary with the 
selection of flow paths. 

Fluid Accumulators - The purpose of the accumulator is to provide adequate 
system fluid volume for thermal expansion^ slow leakage, and to provide adequate 
fluid pressure ranges throughout the expected temperature range. The major ' 
performance characteristics are the fluid volume and the pressure exerted on the 
fluid. The pressure is maintained by a sealed bellows. 
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Heat Exchangers - Heat exchangers provide the means of transfer of heat from 
one fluid to another flowing fluid. The major performance characteristic of interest 
is the "overall heat transfer coefficient (U^A)," which varies with the flow rates 
and inlet temperatures of the fluids, A second characteristic is the fluid's 
pressure drop as functions of the fluid flow rates. These pressure drop character- 
istics are used in determining the total system pressure drop and corresponding 
loop fluid flow rates. 

Evaporators - The H 2 O evaporator and NH^ Boiler are essentially heat exchangers 
with one of the flowing fluids being allowed to vaporize within the exchanger. The 
energy required for the fluid's vapon'zation is absorbed from the fluid being 
cooled. This vaporizing fluid is operated "open-cycle" being vented overboard. 

The amount of cooling is dependent on the flow rate and the specific heat of 
vaporization of the fluid being evaporated. The effective heat transfer is there- 
fore dependent on the cooled fluid inlet temperature and flow rate and the quantity 
rate of fluid evaporated. 

The H 2 O evaporator uses vmter from the H 2 O management subsystem as the 
evaporating fluid. The NH^ Boiler uses ammonfa from three s-torage tanks for the 
evaporating fluid. The H 2 O evaporator is used on-orbit when the payload bay door 
is closed. The NH 2 Boiler is used after entry, below lOOK feet. 

Coldplates - The coldplates provide heat transfer from the mounted equipment 
to the cooling fluid circulating through the coldplates. The primary performance 
characteristic is the effective thermal conductance. This characteristic varies 
according to the cooling fluid inlet temperature, flow rate and the mounted 
equipment temperature. 

Radiator - The radiator cools the Freon 21 by radiating the heat into space. 

The heat rejection is dependent on the fluid inlet temperature, fluid flow rate, 
surface emissivity, surface absorptivity, and the surface area exposed to sunlight, 
earth, and space. 
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Control Logic - The exact switching logic is not currently f.r.cwn. The logic, 
however, represents the control inputs for pump operation, valve positioning, loop 
selection, etc. These inputs can be manual controls, radio frequency commands, or 
automatic equipment commands. The functions of the logic are normally dependent 
on the voltage level, pressure level, temperatures, etc. 

ATC5 Module Functions and Parameters 

The functions provided by the ATCS module include calculations and performance 
determination pertaining to control logic, coldplates, heat exchangers, evaporators, 
radiator, and pumps. Figure 4.7-121 is a block diagram which illustrates the module 
functional elements and interfaces with other modules. Table 4,7-34 provides a 
listing of the parameters associated vnth the ATCS module. The following paragraphs 
describe the functions performed by each element. 

Control Logic - This element provides logic determination of loop selection, 
pump enabling, valve positioning, etc., allowing control of the freon fluid flow 
rates, interfaces, temperatures, etc. Inputs would include manual switch and 
valve positions, radio frequency command, automatic cotimands, and computer commands. 
Most of these controls are dependent on electrical bus voltage levels to actuate 
relays, valves, or other circuits. The logic would also include the following: 

® Bypass Valve Position controller: a function of the bus voltage(s) 

and H 2 O evaporator outlet freon temperature, etc. 

® Radiator Bypass Valve Position Control: a function of the bus 

voltage(s) and the radiator outlet freon temperature, etc. 

° Radiator Flow Direction Valve Position: a function of the 

payload door position, etc. 

Coldplates - This element provides the calculations of the thermal conditions 
of the col dpi ate mounted equipment and the effect on the coolant fluids. The 
coldplates cooled are the mid-fuselage, aft-fuselage, and DFI coldplates. The 
following calculations should be provided for each col dpi ale or group of coldplates: 
° Equipment temperatures: functions of equipment mass, equipment 

specific heat, previous temperature, heat dissipation, coldplate 
freon inlet temperature, freon flow rate, freon specific heat, 
heat transfer of the coldplates, heat conduction to walls, etc. 
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TABLE 4.7-34. ACTIVE THERMAL CONTROL PARAMETERS 


\ Parameter 

Type"* 

Electrical power bus voltages 

I 

Switches/control selections 

I 

Coldplate equipment heat loads or power 
* (DPI, AFT fuselage, MID fuselage) 

I 

, Heat exchangers (HgO payload, Cryo Og, fuel cell, hydraulics 1/2, 
1 fluid inlet temps./specific heats/flow rates 

I 

Heat exchanger U^A (overall >heat transfer conductance) 

I 

Sun angle 

I 

Shuttle attitude 

I 

GSE heat exchanger freon outlet temp. 

I 

H 2 O evaporator, H 2 O inlet temp. /pressure/f low rate 

I 

Freon pumps on - (primary: 1, 2; secondary) 

P 

Freon system, branch flow rates 

P 

Freon pump outlet pressure, pressure rise 

CP 

Freon accumulator position (quantity) 

p 

Freon temperature (into and out of coldplates, heat exchangers, 
radiator, evaporators) 

CP 

Coldplate equipment temperatures (DPI, AFT & MID fuselage) 

CP 

Heat exchangers - 2 nd fluid outlet temperature 

(H 2 O, payload, Cryo 02 > fuel cell, hydraulics 1/2) 

CP 

Evaporators - evaporation fluid outlet temperature/vapor pressure 
(NH 3 , H 2 O) 

CP 

Specific heats (freon, fluids, equipment) 

P 

Controlled valve positions 

(Diverter, flow proportioning, bypass, radiator bypass, 
radiator flow direction, NH^ evaporator valves, H 2 G evaporator 
valves, accumulator control valves) 

p 

NH 3 flow rate/quantity remaining/pressure 

CP 

Radiator temperatures 

p 


a 


CP = Critical Performance Parameter 
P = Perfo!-mance Parameter 
I = Input 
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• Freon outlet temperature: function of equipment t£:.perature, 

heat transfer SI inlet freon temperature, inlet freon flow rate, 
specific heat of freon, etc. 

Heat Exchangers - This element provides the interface relationships and 
functions defining the thermal interchange with other modules. This interchange 
includes PRSD, Cryogenic O2 heating for the ARPCS, fuel cell heat dissipation 
from the power generation circulation system, H2O coolant loop heat transfer for 
the ARS,, hydraulic fluid warming for the hydraulics systems, heat transfer from 
payload coolant loops and heat dissipation to the ground cooling loop of the 
prelaunch/launch module. The calculation of the fluid outlet temperatures are 
provided for each interface. 

• Outlet temperatures: functions of inlet fluid temperatures, 

fluid flow rates, heat conductance of the heat exchanger, and 
fluid specific heats. 

Evaporators - This element provides the calculations associated with the NH^ 
boiler subsystem and control of the HgO evaporator as follows: 

A. NH3 Boiler 

1. Quantity NH^ remaining: function of flow rate, flow time, 

leakage,, vent rate, starting quantity for each of three tanks. 

2. Tank pressure: function of NH^ quantity remaining, temperature, 
for each of three tanks. 

3. Tank vent flow: function of tank pressure, density. 

4. Evaporator NH^ valve position: function of electrical bus 

voltage, evaporator outlet freon temperature. 

5. NH3 evaporator flow rates; function of NH^ tank pressure, 

valve position, and density. . - 

6. Freon outlet temperature: function of the inlet freon tem- 

perature, freon flow rate, specific heat, NH^ flow rate, 

NH3 inlet temperature, NH3 specific heat, heat of 
vaporization. 

REPRODUCIBrLITY OP 'ffil 
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B. H 2 O Evaporator 

1. H 2 O flow control valve position: function of bus voltage 

level, outlet freon temperature. 

2. Cutlet freon temperature: a function of H 2 O flow rate, inlet 

freon temperature, freon flow rate, inlet H 2 O temperature, 
specific heat of fluids, water heat of vaporization. 

Radiator - This element determines thermal results and conditions for heat 
rejection. 

• Radiator temperatures: function of the inlet freon temperature, 

freon flow rate, heat rejection, mass, specific heat, freon flow 
direction (payload door position). 

• Radiator heat rejection: a function of the radiator temperature, 

vehicle attitude, vehicle state vector, beta angle, payload door 
position, freon flow direction. 

• Radiator outlet freon temperature: a function of freon flow rate, 

inlet freon temperature, heat rejection, freon flow direction, 
radiator bypass valve position, specific heat, .etc. 

Freon Flow/Pressure/Temperatures - This element determines the freon system/ 
branch flow rates, pressures, and integrated temperatures. 

• System/Branch flow rates: functions of the system configuration, 

pump selection/enabling, freon temperatures, pump and equipment 
flow/pressure characteristics, bus voltage level. 

• System pressures: functions of the flow rates, temperatures, 

accumulator quantities, flow/pressure characteristics, system con- 
figuration, bus voltage level. ■ • 

• Integrated freon temperatures: function of mixing freon flow 

rates/temperatures, system configuration. 

• Accumulator freon quantity: function of the freon leakage, flow 

rate, temperature. 
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ATCS Reference Data Sources and Formats 

ATCS System and component design performance requirements, analysis, 
predictions, and tests provide data for direct comparison with the Shuttle 
simulation results. Figure 4.7-122 is an overview flow chart of a method of 
reference source selection and comparison. Reference 31 (updated at intervals) 
is a source of component and systems performance data regarding design requirements 
analysis, tests, and actual flight. Design requirements are available from 
Reference 76 . The analysis and test results should be available from Shuttle 
design and evaluation groups. 

In addition, several computer programs are available which can be used to 
develop suitable reference modules or to use in performing analysis of the system. 
References 69 and 70 provide descriptions of system component subroutines which 
can be combined to provide a reference module for the ATCS. The G189A program of 
Reference 69 was developed for JSC and is a versatile analytical tool for support 
of environmental systems work. Reference 73 describes an ARS/ATCS performance 
subroutine designed for use with the Wang 700 series programmable calculator. This 
subroutine allows an average run time of five minutes per case as opposed to hours 
or days turnaround when using the regular computer facilities. Figure 4.7-123 
provides a overview flow chart of an ATCS reference module. 

ATCS Validation Methods and Check Cases 

The ATCS module can be verified by the techniques described in Sections 4.2 
and 5.1. During the verification the following drivers are required to provide the 
necessary range of inputs and conditions for establishing each checkpoint. 

S' Electrical Power Generation 
• PRS and D 
e ARPCS 
0 ARS 

0 Payload thermal control loop 
c Prelaunch/launch GSE cooling 
c Hydraulic subsystem heating 
© Food, H 2 O, waste management 
e Equations of motion 
G Intra module functional elements 
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FIGURE 4.7-122 (CONTINUED) 
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LEGEND: 

Av“ Effective flow area of control valves 
Evaporator fluid quantity 
Pump freon flow rate 

branch flow rate 

Heat exchanger Interfaces circuit flow rate 
Evaporator fluid flow rate 
Freon flow rate through radiator 
r-Sun rays incidence angle with radiator panel 
Earth view angle with radiator panels 

7^.- Freon average temperature 
1^- Branch freon temperature 

exchanger freon outlet temperature 
:j_i 5 ^-Heat exchanger interface circuit outlet temperature 
Heat exchanger freon inlet temperature 
Heat exchanger Interface circuit inlet temperature 
Evaporator outlet freon temperature 
%- Evaporator fluid tank temperature 
%--o5~ Evaporator outlet evaporation fluid temperature 
Evaporator freon inlet temperature 
Evaporator inlet evaporation fluid temperature 
Tf'-za/zc" Radiator inlet freon temperature ’ 

7p-on~ Radiator outlet freon temperature 
Tlis - Temperature of radiator surface 

- Freon loop pressure drop 
Zp~ Freon loop effective length 
Effective branch length 
Freon loop flow diameter 
Branch flow diameter 
/y Freon viscosity 

Freon loop effective roughness 

Evaporator storage tank pressure 
^ “ Evaporator pressure on evaporation fluid circuit 
Ambient pressure 
FIGURE 4.7-123 (CONTINUED) 
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The system design requirements (see Ref. 76 ) provide ccrpc'er.t and system 
maxiinum/mininium acceptable performance levels. These requirements should provide 
the initial check case conditions. The results of various contractor- and NASA- 
performed analysis, studies, and evaluations can provide higher fidelity verification 
check cases. Later, data from actual systems and component tests as well as actual 
flight performance can be used to establish the more severe verification check cases 
for both the module and the individual functional elements. 

The check cases should include the exercise of each individual functional 
element and of the module functioning as a unit. The approach for individual 
functional element verification is to nullify or isolate all interaction with other 
elements and allow the calculation of selected outputs for controlled input 
parameters. 

ATCS Data Base Impact 

The ATCS reference module and the ATCS module drivers as previously discussed 
v/ill have a large impact on the simulator data base. The processing subroutines 
(such as data input/output and data comparison) are of small impact, and most of 
them will be common to. all the modules being validated. 

4.7. 6. 3 Food, Water and Waste Management (FWWM) 

This system provides control, storage and' util izaticn of food, water and 
waste. The simplified schematic of the water subsystem (from Ref. 78 ) is shown 
in Figure 4.7-124 . Figure 4.7-125 is a schematic of the waste management subsystem 
(also from Ref. 78 ). 

Fi-IWM System Description 

Food Management - This subsystem provides for the storage and preparation of 
crew meals. 

Water Management - The water management subsystem provides for the collection 
of fuel cell product water, storage in the three potable water bottles, and 
subsequent delivery to water subl imators , overboard dumps, airlock, and food 
management subsystem. 

Waste Management - This subsystem provides for the collection, storage, and 
disposal of condensate (from the ARS subsystem) and human waste. 
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FWWM Module Functions and Parameters 

The food management system is a lower-deck function, and thus will not be 
dynamically simulated. The waste management system only requires the condensate 
collection (flow rate) to be dynamically simulated. The water management sub- 
system, hovjever, interfaces dynamically with the fuel cell and ARS-water coolant 
loop (water subl imators) . The module performance parameters are identified in 
Table 4.7-35. 

Water Management - This functional element provides the following calculations, 
c Water flow rates to using outlets - functions of the tank pressures, 
outlet pressures, and effective flow areas. 

G Tank H 2 O quantities - functions of initial quantity, flow rates, and time. 

Waste Management - This functional element provides the calculation of the conden- 
sate flow rate from the condensing heat exchanger to the urine storage tank or 
vacuum dump. The flow, rate is a function of the heat exchangers inlet pressure, 
condensate quantity and tank pressure. 

FWViM Reference Data Sources and ’Formats 

FWWM subsystem design requirements, analysis, and test results can be used 
for module verification. In addition, certain math models described in previous 
portions of Section 4.7.6 can be utilized for this module. 'Figure 4.7-126 to 
calculate the liquid flow rates, can be developed into a suitable reference module. 
Those portions that are not dynamically simulated can be functionally provided by 
a performance profile (i.e., a tabular function of time). Reference 31 , 77 , and 
12 are sources of component and subsystem performance requirements and data, 

FWWM Validation Methods and Check Cases , . 

This module can be verified by the techniques described in Section 4.2 and 
5.1. Module drivers are required to provide the fuel cell inlet water flow rates, 
water sublimator pressure, water tank pressure/temperature, and condensing heat 
exchanger inlet pressure. Check cases can be developed utilizing component and 
systems maximum and minimum performance design requirements, analysis, and system 
evaluations. 
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TABLE ^.7-3^1 F00D» WATER AND WASTE MANAGEMENT PARAMETERS 


PARAMETER 

TYPE^ 

Condensate heat exchanger H 2 O quantity/pressure 

I 

Ambient pressure 

I 

Fuel cell water flow rates /temperatures 

I 

Water chiller and heater flow rates 

I 

Water sublimator pressure 

I 

Water container pressure/temperature 

I 

Water sublimator pressure regulator flow areas 

P 

Water container water quantities 

CP 

Fan/Separator flow rates 

P 

Urine tank quantities/pressures 

P 


= Performance Parameter 
CP = Critical Performance Parameter 
A = Input Parameter 
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LEGEND: 

foT - Pressure of J— load 

Manifold pressure 

Source pressure of I— tank 

+■ 

'^o'dTce temperature of I— tank fluid 
^^^.f-Liquid flow rate from I~ tank into manifold 
'^o<r Liquid flow rate from manifold to load 

Liquid temperature into manifold from I~ tank 

'Hi 

7^_y- Fluid temperature delivered to J— load 
Fluid velocity from I~ tank into manifold 

+ h 

Fluid velocity from manifold to J— load 

- Fluid temperature in manifold 
/L - Fluid density 

Fluid mass in manifold 
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<^xt4 ~ Flow area from I~ tank into manifold 
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FIGURE 4.7-126 (CONTINUED) 
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FWWM Data Base Impact 

Impact to the simulation data base is small. The reference module should be 
relatively simple. Few drivers are required, and the comparison/processing 
subroutines would be common to other simulation modules. 



4.7-400 

;V?CC?0/V/VE'JLL DOUGL./X& - f^/XSlT 




SECTION 5 


MDC El 201 
30 December 1974 


METHODS FOR VALIDATING PERFORMANCE 

The process of simulation validation consists of exercising a simulation 
with properly-chosen inputs, gathering the output performance parameter data 
which it generates in response to these inputs, and comparing these data to 
reference data representing the real v/orld which the simulation is intended 
to represent. Support software required to efficiently perform these operations 
is briefly discussed below. Additional detail will be provided in a later 
report. 

5.1 VALIDATION SOFTWARE STRUCTURE 

Figure 5-1 depicts a support-software organization suitable for the 
generation, handling, comparison and display of simulation and reference 
data required to perform simulation software validation. A complete 
validation software system will consist of a basic "driver" or executive 
(denoted SOFCHK in the figure) and a set of service routines, briefly 
identified in Table 5-1. 

These routines will, of course, vary in degree of generality. Routines 
GENPT, SIMMOD, and CHKMOD must be completely "customized" for each simulator 
module being validated. Routine DREAD will be a data-driven input routine, 
designed to be compatible with the basic data-output structure of the simu- 
lator being validated. Finally, routines DWRITE and DSPLAY should be highly 
independent of the characteristics of the module being validated. The 
greater the degree of generality designed into the support software, of course, 
the less specialized coding and setup required to validate each individual 
nxDdule. 
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CALL GENPT 
(GENERATE A 
CHECK POINT) 


0 /EXTERNAt>^ 
ATA RUN 


^ HAVE ALL ^ 
CHECK POINTS BEEN 
^ SEQUENCED ^ 


I 


CALL SimOD 
(GENERATE ONE 
RECORD OF 
SIMULATOR DATA) 




CALL DSPLAY(PRO- 
CESS DATA FILE 
& OUTPUT DATA 
LISTINGS & PLOT.S) 



CALL CHKMOD 
(GENERATE CHECK 
DATA CORRESPOND- 
ING TO SIM.- DATA 


CALL DWRITE 
(WRITE SIMULATOR 
& CHECK DATA ON 
DATA FILE) 


FIGURE 5-1. VALIDATION SOFTWARE OVERALL FLOW 
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TABLE 5-1. VALIDATION SUBROUTINES^ 


SUBROUTINE 

PURPOSE 

DREAD 

Reads records from a data tape or disc file 
generated during a simulator performance run; 
selects data for the appropriate module and 
places it into a data array. 

6ENPT 

Generates a checkpoint which includes all data 
required for input into the module to be verified. 

SIMMOD 

Interfaces with the simulation software module 
and places the input and output data into a data 
array. 

CHKMOD 

Interfaces the "reference" software module and 
places the input and output data 'into a data array 


compatible with the simulation software data arrpy. 

DWRITE 

Writes the data from the simulator software module 
and the reference module onto a data file to be 
used for comparison processing. 

DSPLAY 

Processes the data file written by DWRITE. 

Performs automated comparisons of simulation and 
reference data, and/or generates listings and plots 
for manual comparison of data. Incorporates a 
variety of differencing techniques and comparison 
criteria. 


^Math flows and comprehensive discussions of these routines 
will be provided in a later report. 
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'5.2 DATA ACQUISITION AND FORMATTING 

For efficient manual or automatic comparison of the reference and 
simulation performance-parameter data, it is necessary that these data be 
put into compatible formats. 

The means for manual comparison will almost always be a time-history 
plot of the system module's response to its inputs. If both the reference 
and simulation data are in machine-readable form, service routines may be used 
to overplot them on the same set of axes, in any convenient scale. In many 
cases, however, the reference data will be in the form of external hard- 
copy, previously plotted. It is then necessary that the service routines 
used for plotting the simulation performance-parameter data allow full 
control of scaling, to force the simulation data plot to be exactly comparable 
to the reference data plot. Then manual comparison can be accomplished by 
simply overlaying the two plots. 

For automatic comparison, the reference and simulation data will have 
to be put out on temporary files, which are compatible with respect to 
units, axes, machine code (BCD/EBCDIC, 7- track/ 9- track, etc.), and time 
spacing. Generally, the process of ensuring compatibility will be undertaken 
by the module drivers. In some cases, however, it will be necessary to 
reprocess an existing data-file; e. g. , machine-code conversion, time 
interpolation. 

5.3 COMPARISON METHODS AND CRITERIA 

As previously mentioned, manual comparison will normally be performed 
by overplotting data available to the machine, or by overlaying a newly- 
generated data plot on an existing plot. The comparison criteria in manual 
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comparison will generally be more or less subjective, based upon the validator's 
experience with similar simulation programs, knowledge of the overall 
fidelity standard of the particular simulator, known inaccuracies in the 
basic data C^- g.j aerodynamic coefficients), and the importance of the 
particular performance parameter to the validity of training or procedures 
development to Be done on that simulator. 

To accomplish automatic validation, it is necessary that such subjective 
criteria Be translated into objective terms, and then into some machine 
algorithm (maximum error, average percent error, integral of squared error, 
etc.) v/hich assigns a numerical value to the degree of mismatch betv/een the 
reference and simulation data time-histories. Finally, this mismatch value 
must be compared to a numerical acceptance value, beyond which the fidelity 
is considered unacceptable. The choice of mismatch algorithms and accep- 
tance values will require considerable judgement and experience. In practice, 
the validator will often use these computed mismatch values as a guide in 
perturbing the values of simulation parameters (gains, time constants, etc.), 
attempting to secure the best possible match. 
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CONCLUSIONS AND RECOMMENDATIONS 

1. Attention should be concentrated upon the "critical" performance parameters of 
each simulation module in performing simulation validation. 

2.. There are four general classes of reference data sources for simulation valida- 
tion: closed-form solutions, independent math models, existing analysis/ 

simulation programs, and test data. Each has particular advantages and dis- 
advantages. 

3. The SVDS and $SFS subroutine libraries offer many potential reference modules 
for simulation validation. However, modifications will be necessary in many 
cases. 

4. Driver routines will be needed for module validation exercises — both to 
provide the inputs representing interfacing modules, and to ensure format 
compatibility between the reference and simulation modules. 

5. Service routines will be required for printout, plotting, data comparison, 
and data base management. 

. 

6. Most simulation modules will require both static and dynamic check cases for 
thorough validation. 

7. Modules must be validated in isolation, as well as at various stages of 
simulation integration. 
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